aboutcode-org/scancode.io

View on GitHub

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

Stars: 215
Forks: 203
Open beginner issues: 0
Indexed issues: 416
Avg merge: 4d 8h
Merged PRs (30d): 6

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 13, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Open All

416 open issues indexed

Always keep all untracked SCTK files attributes in extra data when loading a scan Open

aboutcode-org/scancode.io#887 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Should a dependency tree be scoped to a single project ? Open

aboutcode-org/scancode.io#888 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Allow rerunning pipelines Open

aboutcode-org/scancode.io#889 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve maven pre-population Open

aboutcode-org/scancode.io#900 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
D2D: Improve the "map_checksum" step Open

aboutcode-org/scancode.io#907 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support aws s3 urls Open

aboutcode-org/scancode.io#917 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Also fetch and scan submodules for a git repo Open

enhancement

aboutcode-org/scancode.io#921 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Health check endpoint Open

aboutcode-org/scancode.io#922 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve presentation of the project details section: "Resources detected license expressions" Open

enhancement low priority web-ui

aboutcode-org/scancode.io#937 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
One a project page, display the created date and the date of the last pipeline run completion Open

aboutcode-org/scancode.io#942 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update D2D purldb matching to pick best match Open

enhancement

aboutcode-org/scancode.io#943 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
When a project message is related to a resource path or package, I want to link to these Open

aboutcode-org/scancode.io#944 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
It would be mighty useful if we could "group by" some value the rows in resources, packages, or dependencies lists Open

enhancement web-ui

aboutcode-org/scancode.io#950 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Per-project show SCIO commit used Open

enhancement

aboutcode-org/scancode.io#956 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 13, 2026
Issue with loading new project. Open

aboutcode-org/scancode.io#966 · 18 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Map and match does not work as expected for Java Open

aboutcode-org/scancode.io#967 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
A file matched to many different packages should be flag for review Open

aboutcode-org/scancode.io#970 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
D2D: ABOUT file matching step should also take care of corresponding development resource Open

aboutcode-org/scancode.io#977 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
UI: Enable viewing and sorting the packages list by the type matching. Also display in details Open

aboutcode-org/scancode.io#979 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Build SCIO as a single, multiprocess image Open

aboutcode-org/scancode.io#988 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Child process terminated abruptly Open

aboutcode-org/scancode.io#989 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
License policy alert should be shown on empty license Open

aboutcode-org/scancode.io#993 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Multi-level matching and lookup for package data Open

aboutcode-org/scancode.io#995 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
RFC: Introduce pipeline templates Open

aboutcode-org/scancode.io#996 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add link to lookup in PurlDB or external reference using a PURL as a key Open

aboutcode-org/scancode.io#999 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Failure to delete large project Open

aboutcode-org/scancode.io#1002 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Extraction errors are cryptic Open

aboutcode-org/scancode.io#1005 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Java d2d: Use source-classes-mapping.txt for JSP mapping Open

aboutcode-org/scancode.io#1011 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
D2D: Add config to ignore some "requires-review" Open

devel-deploy

aboutcode-org/scancode.io#1012 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
populate_purldb_with_detected_purls steps takes too long Open

aboutcode-org/scancode.io#1017 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Revisit Package Instance Support for d2d pipeline Open

aboutcode-org/scancode.io#1022 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add support for custom PostgreSQL configuration file in the docker compose context Open

aboutcode-org/scancode.io#1024 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Streamline and fix code header notice Open

nice-to-have

aboutcode-org/scancode.io#1050 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Store and retrieve on demand scanned packages/archives Open

aboutcode-org/scancode.io#1063 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enhance grouping of non-package files together to additional pipelines Open

enhancement high priority reporting

aboutcode-org/scancode.io#1064 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
RFC: Design improved integration between DejaCode and ScanCode.io Open

enhancement

aboutcode-org/scancode.io#1067 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add security-focused pipeline to scan for effective potential malware detection Open

aboutcode-org/scancode.io#1070 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Rethink current CHANGELOG as Release Notes Open

aboutcode-org/scancode.io#1075 · 11 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Load nuget-inspector data Open

aboutcode-org/scancode.io#1089 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Allow scancode scans as a generic input Open

aboutcode-org/scancode.io#1090 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
RFC: Define and develop scoring elements for SCA Clarity Open

design-needed enhancement help wanted high priority

aboutcode-org/scancode.io#1102 · 9 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Use unique names for docker compose "services" Open

aboutcode-org/scancode.io#1119 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Integrate PurlDB in the UI navigation Open

aboutcode-org/scancode.io#1125 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Design ways to share ScanCode.io scans between DejaCode and PurlDB Open

aboutcode-org/scancode.io#1131 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
PurlDB-requested package index scans can fail for larger packages with large scans and many scans at once Open

aboutcode-org/scancode.io#1143 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incorrect d2d "unmapped to" mappings reported Open

bug

aboutcode-org/scancode.io#1150 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
SCIO: Scan Go binaries for packages Open

aboutcode-org/scancode.io#1153 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
ScanCode.io: Use proper apk package type for Alpine Open

aboutcode-org/scancode.io#1155 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
In alpine container images, use /etc/apk/repositories Open

aboutcode-org/scancode.io#1157 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
In alpine container where the first layer is not clearly alpine, we do not detect the OS Open

aboutcode-org/scancode.io#1159 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/scancode.io

Get new issues in your inbox