aboutcode-org/scancode.io

View on GitHub

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

Stars: 215
Forks: 203
Open beginner issues: 0
Indexed issues: 416
Avg merge: 4d 8h
Merged PRs (30d): 6

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 13, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Open All

416 open issues indexed

Use webpack'ed JS app as test case for d2d Open

aboutcode-org/scancode.io#1166 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Parts of the latest CycloneDX specs (1.5, 1.6) are not supported by `cyclonedx-python-lib` Open

aboutcode-org/scancode.io#1171 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Consider parallelizing the D2d matching process for every resource Open

aboutcode-org/scancode.io#1174 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Consider using PathMapper Object Open

aboutcode-org/scancode.io#1175 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Search box in resource page is too small Open

enhancement low priority web-ui

aboutcode-org/scancode.io#1184 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
ERROR: No matching distribution found for tree-sitter-bash Open

aboutcode-org/scancode.io#1187 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Create documentation for d2d in ScanCode.io for various tech stacks Open

aboutcode-org/scancode.io#1188 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
SCIO: Lookup/fetch and match base image for windows containers Open

aboutcode-org/scancode.io#1189 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
SCIO: Bundle SCIO in a single image for easy CLI and CI/CD deployment Open

aboutcode-org/scancode.io#1190 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
ScanCode.io: need to scan for license inside a detected container package Open

aboutcode-org/scancode.io#1194 · 2 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Treat /var/lib/rpm/* files as config files on RPM rootfs and RPM containers Open

aboutcode-org/scancode.io#1195 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Analyze buildinfo manifest on RHEL and UBI images Open

aboutcode-org/scancode.io#1196 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve Projects/Project navigation Open

enhancement medium priority web-ui

aboutcode-org/scancode.io#1199 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enhancement: Trigger project status notifications based on scancode-config.yml values Open

enhancement

aboutcode-org/scancode.io#1208 · 6 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Improve d2d problem reporting for Java (and others) Open

aboutcode-org/scancode.io#1213 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add test for ELF d2d using a Debian packages source and binary Open

aboutcode-org/scancode.io#1214 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
to/debian-binary files SHOULD not be mapped nor matched Open

bug

aboutcode-org/scancode.io#1215 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Issues with ELF d2d on Debian debug package Open

aboutcode-org/scancode.io#1219 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve d2d reporting Open

aboutcode-org/scancode.io#1261 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Detected package doesn't exist in the "for_packages" field Open

aboutcode-org/scancode.io#1272 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add is_legal and all "classify" attributes to Resource model Open

enhancement

aboutcode-org/scancode.io#1275 · 1 comment · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Improve purl2sym API results Open

aboutcode-org/scancode.io#1277 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Show OSSF scorecard data in the UI as quality data Open

aboutcode-org/scancode.io#1284 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Export OSSF scorecard data in SBOMs/other outputs Open

aboutcode-org/scancode.io#1285 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Rename "run" command to add prefix and make this more conspicuous Open

aboutcode-org/scancode.io#1288 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
`populate_purldb` pipeline fails Open

aboutcode-org/scancode.io#1292 · 0 comments · 0 reactions · 3 assignees · Indexed Sep 13, 2026
Include license matched text diagnostics in scans Open

aboutcode-org/scancode.io#1297 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Report progress when doing matching in d2d step Open

bug

aboutcode-org/scancode.io#1298 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Allow ABOUT files without about_resources location Open

aboutcode-org/scancode.io#1299 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Track the ABOUT file used to map a package in a d2d Open

aboutcode-org/scancode.io#1308 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Ensure that rerunning some pipeline/step does not crash Open

aboutcode-org/scancode.io#1309 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Declared license expression (SPDX) is not updated in d2d with ABOUT files Open

bug

aboutcode-org/scancode.io#1311 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Design a better renaming convention that adding a clone suffix when cloning a project Open

aboutcode-org/scancode.io#1312 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
BUG: `resolve_dependencies` failures Open

bug

aboutcode-org/scancode.io#1313 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
XSLX output is truncated Open

aboutcode-org/scancode.io#1315 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve the Package Resource tab UX Open

aboutcode-org/scancode.io#1318 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Colect file date Open

aboutcode-org/scancode.io#1321 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Generate SBOMS (CycloneDX and SPDX) at release time Open

aboutcode-org/scancode.io#1327 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Add new add-on pipeline to "enrich" packages with the PurlDB Open

aboutcode-org/scancode.io#1328 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Migrate release_date to DateTimeField for consistency with PurlDB model and incoming data Open

aboutcode-org/scancode.io#1335 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Inputs should have scan info details Open

aboutcode-org/scancode.io#1337 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Resource size not sorted correctly in UI resource list Open

aboutcode-org/scancode.io#1340 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Scan Go binaries in container images and improve debian/ubuntu support Open

aboutcode-org/scancode.io#1341 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Need to refine and report CycloneDX SBOM metadata Open

design-needed medium priority

aboutcode-org/scancode.io#1343 · 3 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Add globbing support for licenses in the License Policies `policies.yml` file Open

aboutcode-org/scancode.io#1347 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incorrect summary Open

aboutcode-org/scancode.io#1356 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
decscription field is truncated in XLSX output Open

bug

aboutcode-org/scancode.io#1360 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Android Device D2D: Extract Android device firmware Open

aboutcode-org/scancode.io#1367 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Android Device D2D: Map and analyze Linux Kernel Open

aboutcode-org/scancode.io#1368 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Android Device D2D: Map and analyze Bootloader Open

aboutcode-org/scancode.io#1369 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/scancode.io

Get new issues in your inbox