CycloneDX / CycloneDX/license-scanner

Feature Request: License Scanner compares against allowed licenses

Open
#29 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
55
Forks
8
PR merge metrics
No merged PRs in 30d

Description

**Issue:** license-scanner does not inform if there is a mismatch of licenses, it only returns the list of licenses.

**Discussion:** CI/CD implementation would benefit form license comparisons.

**Recommendation:** Implement a flag which would cause the std.out return true if all scanned licenses are on the whitelist, and false for otherwise.

### Use Case
As a CI/CD pipeline administrator, I can provide license-scanner a list of accepted licenses, and if there is a mismatch return false otherwise return true.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.