aboutcode-org / aboutcode-org/scancode-toolkit

Dcoument CICD integration

Open
#2,898 4 comments 2 reactions 0 assignees View on GitHub
documentation easy must have Priority: medium
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

Do we have an example of how to integrate Scancode in CICD pipeline. My use case is that I have an allowed list of licenses that I have defined as license policy and pass it to scan code --license-policy. It adds a new tag as well. But I cannot figure out how to easily identify which files do not match my license policy and extract them from the output. The idea is to extract the files that have unapproved licenses, fail the build, submit the output json for violating files to a central logging solution like ElasticSearch. Not sure how to go about extracting the violating files details in a nice way and failing the build.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.