Directories
¶
| Path | Synopsis |
|---|---|
|
parsers
Package parsers provides functionality to parse dependency manifests from various package management systems and extract dependency information as standardized Package URLs (PURLs).
|
Package parsers provides functionality to parse dependency manifests from various package management systems and extract dependency information as standardized Package URLs (PURLs). |
|
Package filter decides which files a scan should process.
|
Package filter decides which files a scan should process. |
|
fingerprint
|
|
|
wfp
Package fingerprint generates the WFP (Winnowing FingerPrint) of a file using the original WFP1 algorithm (30-byte grams, 64-hash window).
|
Package fingerprint generates the WFP (Winnowing FingerPrint) of a file using the original WFP1 algorithm (30-byte grams, 64-hash window). |
|
Package manifests is the single source of truth for the dependency-manifest file names/patterns the SDK understands (package.json, go.mod, pom.xml, …).
|
Package manifests is the single source of truth for the dependency-manifest file names/patterns the SDK understands (package.json, go.mod, pom.xml, …). |
|
Package output writes scan output to a file or, when no path is given, to stdout.
|
Package output writes scan output to a file or, when no path is given, to stdout. |
|
Package postprocess applies a scan's bill-of-materials rules to its results: what the user says about the components the scan found, once the scan has found them.
|
Package postprocess applies a scan's bill-of-materials rules to its results: what the user says about the components the scan found, once the scan has found them. |
|
Package sbom generates SBOM documents (CycloneDX, SPDX Lite) from a neutral inventory of components.
|
Package sbom generates SBOM documents (CycloneDX, SPDX Lite) from a neutral inventory of components. |
|
scansource
Package scansource adapts SCANOSS SDK values — a v3 scan result and the licenses, vulnerabilities, cryptography and geoprovenance decoration responses — into the neutral sbom.Inventory consumed by the sbom package.
|
Package scansource adapts SCANOSS SDK values — a v3 scan result and the licenses, vulnerabilities, cryptography and geoprovenance decoration responses — into the neutral sbom.Inventory consumed by the sbom package. |
|
Package scanner turns a source tree into WFP fingerprints.
|
Package scanner turns a source tree into WFP fingerprints. |
|
Package scanoss is a Go SDK for the SCANOSS component services (cryptography, vulnerabilities, licenses, geoprovenance).
|
Package scanoss is a Go SDK for the SCANOSS component services (cryptography, vulnerabilities, licenses, geoprovenance). |
|
Package scanpipeline runs the scan pipeline that assembles a neutral sbom.Inventory.
|
Package scanpipeline runs the scan pipeline that assembles a neutral sbom.Inventory. |
|
Package settings loads a project's scanoss.json (or settings.json): the BOM rules (include/identify/ignore/remove/replace) and the skip rules (patterns and size bounds per operation).
|
Package settings loads a project's scanoss.json (or settings.json): the BOM rules (include/identify/ignore/remove/replace) and the skip rules (patterns and size bounds per operation). |
Click to show internal directories.
Click to hide internal directories.