Directories
¶
| Path | Synopsis |
|---|---|
|
Package batch groups file fingerprints into upload-sized batches.
|
Package batch groups file fingerprints into upload-sized batches. |
|
parsers
Package parsers provides functionality to parse dependency manifests from various package management systems and extract dependency information as standardized Package URLs (PURLs).
|
Package parsers provides functionality to parse dependency manifests from various package management systems and extract dependency information as standardized Package URLs (PURLs). |
|
Package filter decides which files a scan should process.
|
Package filter decides which files a scan should process. |
|
fingerprint
|
|
|
wfp
Package fingerprint generates the WFP (Winnowing FingerPrint) of a file using the original WFP1 algorithm (30-byte grams, 64-hash window).
|
Package fingerprint generates the WFP (Winnowing FingerPrint) of a file using the original WFP1 algorithm (30-byte grams, 64-hash window). |
|
Package manifests is the single source of truth for the dependency-manifest file names/patterns the SDK understands (package.json, go.mod, pom.xml, …).
|
Package manifests is the single source of truth for the dependency-manifest file names/patterns the SDK understands (package.json, go.mod, pom.xml, …). |
|
Package output writes scan output to a file or, when no path is given, to stdout.
|
Package output writes scan output to a file or, when no path is given, to stdout. |
|
Package postprocess is retained for backward compatibility.
|
Package postprocess is retained for backward compatibility. |
|
Package sbom generates SBOM documents (CycloneDX, SPDX Lite) from a neutral inventory of components.
|
Package sbom generates SBOM documents (CycloneDX, SPDX Lite) from a neutral inventory of components. |
|
scansource
Package scansource adapts SCANOSS SDK values (a v3 scan result and a vulnerabilities decoration response) into the neutral sbom.Inventory consumed by the sbom package.
|
Package scansource adapts SCANOSS SDK values (a v3 scan result and a vulnerabilities decoration response) into the neutral sbom.Inventory consumed by the sbom package. |
|
Package scanner turns a source tree into WFP fingerprints.
|
Package scanner turns a source tree into WFP fingerprints. |
|
Package scanoss is a Go SDK for the SCANOSS component services (cryptography, vulnerabilities, licenses, geoprovenance).
|
Package scanoss is a Go SDK for the SCANOSS component services (cryptography, vulnerabilities, licenses, geoprovenance). |
|
Package scanpipeline runs the scan pipeline that assembles a neutral sbom.Inventory.
|
Package scanpipeline runs the scan pipeline that assembles a neutral sbom.Inventory. |
|
Package settings loads a project's scanoss.json (or settings.json): the BOM rules (include/identify/ignore/remove/replace) and the skip rules (patterns and size bounds per operation).
|
Package settings loads a project's scanoss.json (or settings.json): the BOM rules (include/identify/ignore/remove/replace) and the skip rules (patterns and size bounds per operation). |
Click to show internal directories.
Click to hide internal directories.