scancode-toolkit
scancode-toolkit copied to clipboard
Detect and report as RPMs the source RPMs in RHEL UBI images
For instance docker://redhat/ubi8:8.9-1160-source contains about 140 source RPMs that are just named after their SHA256 as in "cc150f5198bc818e1807b9985468047ec7c509654bdfd806a65a2b5081fafd00" and are not detected as RPMs (nor extracted)