aboutcode-org/scancode.io

Vedi su GitHub

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

Stelle: 215
Fork: 203
Issue aperte per principianti: 0
Issue indicizzate: 416
Merge medio: 4g 8h
PR unite (30g): 6

Lingua principale: Python
Licenza: Apache-2.0
Ultimo push su GitHub: 11/9/2026
Ultima indicizzazione: 13/9/2026
Guida per i contributori: Guida per i contributori
Codice di condotta: Nessun codice di condotta
Label per principianti: help wanted

Aperta Tutte

416 issue aperte indicizzate

Define what is a conclusive "To-From" mapping in the develop_to_deploy pipeline Aperta

aboutcode-org/scancode.io#677 · 1 commento · 0 reazioni · 3 assegnatari · Indicizzata il 13/9/2026
Track if a DiscoveredPackage is for the From-side, the To-side or both Aperta

low priority

aboutcode-org/scancode.io#686 · 1 commento · 0 reazioni · 1 assegnatario · Indicizzata il 13/9/2026
RFC: Store symbols, DWARFs, package, function names, .js.map, and related Aperta

aboutcode-org/scancode.io#689 · 11 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Add user roles and permissions Aperta

design-needed enhancement high priority

aboutcode-org/scancode.io#690 · 6 commenti · 0 reazioni · 2 assegnatari · Indicizzata il 13/9/2026
Design procedure for mapping Tomcat-compiled JSP to their source Aperta

devel-deploy

aboutcode-org/scancode.io#692 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Filter the Resource based on values in columns Aperta

aboutcode-org/scancode.io#698 · 3 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
When I analyze a project with a to and from with a develop_to_deploy pipeline, show counts on each side Aperta

low priority

aboutcode-org/scancode.io#699 · 0 commenti · 0 reazioni · 1 assegnatario · Indicizzata il 13/9/2026
When a file is mapped in a develop_to_deploy pipeline I would like to navigate to the related file(s) Aperta

aboutcode-org/scancode.io#701 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
In the Relations view when I hover on map type, I would like to see some help Aperta

aboutcode-org/scancode.io#702 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
In the Relations view when the To or From is a directory .... Aperta

aboutcode-org/scancode.io#704 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
I want a better looking diff when I view a diff in the Relations view Aperta

aboutcode-org/scancode.io#706 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Add support for generated file detection Aperta

aboutcode-org/scancode.io#716 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Improve collection and presentation of authors/holders/copyrights for packages Aperta

aboutcode-org/scancode.io#719 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
No package data is returned for package that has colon in its name Aperta

aboutcode-org/scancode.io#721 · 3 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Docs: Generate attribution with custom template tutorial Aperta

documentation

aboutcode-org/scancode.io#722 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Consider tracking new SCTK v32.x top-level license packages rather than file-level package_data Aperta

aboutcode-org/scancode.io#732 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Ensure that we can run load_inventory using a JSON without the "files" filled in. Aperta

low priority

aboutcode-org/scancode.io#734 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
It takes too long to generate attribution on a project using a freshly restarted SCIO Aperta

bug low priority

aboutcode-org/scancode.io#738 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Support correct detection of conflicting but compatible licenses in a package with a hierarchy of evidence Aperta

aboutcode-org/scancode.io#742 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
About detecting of copyright and license via scancode.io on windows binary files(exe) Aperta

aboutcode-org/scancode.io#746 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Support any license key in `build_spdx_license_expression` Aperta

aboutcode-org/scancode.io#753 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Detect package database presence in container images/rootfs Aperta

aboutcode-org/scancode.io#758 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
scan_codebase should also scan all files that belong to an identified package Aperta

high priority

aboutcode-org/scancode.io#762 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Enhance RESOURCES, PACKAGES and DEPENDENCIES table display Aperta

design-needed web-ui

aboutcode-org/scancode.io#765 · 1 commento · 0 reazioni · 3 assegnatari · Indicizzata il 13/9/2026
Do not report error for character/device file Aperta

aboutcode-org/scancode.io#766 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Trivy CycloneDX SBOM provides base64 encoded texts that we may not detect or report an "unknown" license Aperta

aboutcode-org/scancode.io#770 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Add option for rootfs inventory data Aperta

design-needed enhancement

aboutcode-org/scancode.io#780 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Add new pipeline for secrets Aperta

aboutcode-org/scancode.io#787 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Add Show / Hide option for Codebase display Aperta

enhancement medium priority web-ui

aboutcode-org/scancode.io#800 · 3 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Map "To" deployed ELFs to "From" development C/C++ source code Aperta

aboutcode-org/scancode.io#812 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Run a package-only scan on a codebase as a new pipeline - Proactively scan and review all my packages Aperta

aboutcode-org/scancode.io#815 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Design data structure structure to store "TODO" items for review Aperta

aboutcode-org/scancode.io#817 · 2 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Extract all files with an is_archive flag in the d2d pipeline Aperta

aboutcode-org/scancode.io#826 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Map archives when their extracted directory mapped/processed Aperta

aboutcode-org/scancode.io#827 · 2 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
On commit or on a daily schedule, create a new project and run pipeline Aperta

aboutcode-org/scancode.io#828 · 1 commento · 0 reazioni · 1 assegnatario · Indicizzata il 13/9/2026
Consider supporting the `Project.slug` in management commands Aperta

aboutcode-org/scancode.io#833 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Distinguish between ABOUT files found in the codebase vs. curations Aperta

aboutcode-org/scancode.io#834 · 11 commenti · 0 reazioni · 1 assegnatario · Indicizzata il 13/9/2026
Add settings to optionally include some SBOM details Aperta

aboutcode-org/scancode.io#838 · 2 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
SPDX report is missing detailed license texts for LicenseRef Aperta

bug high priority

aboutcode-org/scancode.io#841 · 5 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Very large codebases can break XLSX outputs Aperta

aboutcode-org/scancode.io#843 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Migrate licenses views to main scanpipe app Aperta

aboutcode-org/scancode.io#847 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Make compliance alerts part of the config file/settings Aperta

aboutcode-org/scancode.io#857 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Allow using custom redis, database etc with docker compose Aperta

aboutcode-org/scancode.io#863 · 1 commento · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Documentation does not mention supporting CPU architecture Aperta

aboutcode-org/scancode.io#866 · 8 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Spaces in resource paths should be encoded in URLs Aperta

aboutcode-org/scancode.io#868 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Enhance Discovered Packages with PurlDB data Aperta

enhancement

aboutcode-org/scancode.io#869 · 0 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
When I look at a resource details, I want to search resources Aperta

aboutcode-org/scancode.io#870 · 2 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Add status or details for package Aperta

aboutcode-org/scancode.io#880 · 7 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
When mapping two resources in a d2d pipeline I would like to store explanatory data in the relation Aperta

aboutcode-org/scancode.io#883 · 2 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026
Definitions for `DiscoveredPackage` and `DiscoverdDependency` are very different Aperta

aboutcode-org/scancode.io#885 · 7 commenti · 0 reazioni · 0 assegnatari · Indicizzata il 13/9/2026

aboutcode-org/scancode.io

Ricevi le nuove issue nella tua casella