@@ -13,6 +13,8 @@ Check out the code at https://github.com/nexB/scancode-toolkit
13
13
Discover also:
14
14
15
15
- The ScanCode.io server project here: https://scancodeio.readthedocs.io
16
+ - The ScanCode Workbench project for visualization of scancode results data:
17
+ https://github.com/nexB/scancode-workbench
16
18
- Other companion SCA projects for code origin, license and security analysis
17
19
here: https://aboutcode.org
18
20
@@ -23,11 +25,11 @@ Build and tests status
23
25
We run 30,000+ tests on each commit on multiple CIs to ensure a good platform
24
26
compabitility with multiple versions of Windows, Linux and macOS.
25
27
26
- +-------------- +--------------+ --------------+
27
- | **Appveyor ** | **Azure ** | **RTD Build** |
28
- +============== +==============+ ==============+
29
- | | appveyor | | | azure | | |docs-rtd | |
30
- +-------------- +--------------+ --------------+
28
+ +------------+-------------- +-------------------------+-------------- --------------+
29
+ | **Azure ** | **RTD Build**| **GitHub actions Docs ** | **GitHub actions Release ** |
30
+ +============+============== +=========================+============== ==============+
31
+ | | azure | | | docs-rtd | | |docs-github-actions | | | release-github-actions | |
32
+ +------------+-------------- +-------------------------+-------------- --------------+
31
33
32
34
33
35
Why use ScanCode?
@@ -61,35 +63,39 @@ Why use ScanCode?
61
63
new and improved scanners, data summarization, package manifest parsers, and
62
64
new outputs.
63
65
64
- - You can save your scan results as **JSON, HTML, CSV or SPDX ** or create your
65
- own format with Jinja templates.
66
+ - You can save your scan results as **JSON, YAML, HTML, CycloneDX or SPDX ** or
67
+ even create your own format with Jinja templates.
66
68
67
69
- You can also organize and run ScanCode server-side with the
68
70
companion `ScanCode.io web app <https://github.com/nexB/scancode.io >`_
69
71
to organize and store multiple scan projects including scripted scanning pipelines.
70
72
73
+ - ScanCode output data can be easily visualized and analysed using the
74
+ `ScanCode Workbench <https://github.com/nexB/scancode-workbench >`_ desktop app.
75
+
71
76
- ScanCode is **actively maintained **, has a **growing users and contributors
72
77
community **.
73
78
74
79
- ScanCode is heavily **tested ** with an automated test suite of over **20,000 tests **.
75
80
76
81
- ScanCode has an extensive and growing documentation.
77
82
78
- - ScanCode can process these packages, build manifest and lockfile formats to collect Package URLs and
79
- extract metadata: Alpine packages, BUCK files, ABOUT files, Android apps, Autotools, Bazel,
80
- JavaScript Bower, Java Axis, MS Cab, Rust Cargo, Cocoapods, Chef Chrome apps,
81
- PHP Composer and composer.lock, Conda, CPAN, Debian, Apple dmg,
82
- Java EAR, WAR, JAR, FreeBSD packages, Rubygems gemspec, Gemfile and Gemfile.lock,
83
- Go modules, Haxe packages, InstallShield installers, iOS apps, ISO images,
84
- Apache IVY, JBoss Sar, R CRAN, Apache Maven, Meteor, Mozilla extensions,
85
- MSI installers, JavaScript npm packages, package-lock.json, yarn.lock,
86
- NSIS Installers, NugGet, OPam, Cocoapods, Python PyPI setup.py, setup.cfg, and
83
+ - ScanCode can process packages, build manifest and lockfile formats to collect
84
+ Package URLs and extract metadata: Alpine packages, BUCK files, ABOUT files,
85
+ Android apps, Autotools, Bazel, JavaScript Bower, Java Axis, MS Cab,
86
+ Rust Cargo, Cocoapods, Chef Chrome apps, PHP Composer and composer.lock,
87
+ Conda, CPAN, Debian, Apple dmg, Java EAR, WAR, JAR, FreeBSD packages,
88
+ Rubygems gemspec, Gemfile and Gemfile.lock, Go modules, Haxe packages,
89
+ InstallShield installers, iOS apps, ISO images, Apache IVY, JBoss Sar,
90
+ R CRAN, Apache Maven, Meteor, Mozilla extensions, MSI installers,
91
+ JavaScript npm packages, package-lock.json, yarn.lock, NSIS Installers,
92
+ NugGet, OPam, Cocoapods, Python PyPI setup.py, setup.cfg, and
87
93
several related lockfile formats, semi structured README
88
94
files such as README.android, README.chromium, README.facebook, README.google,
89
95
README.thirdparty, RPMs, Shell Archives, Squashfs images, Java WAR, Windows
90
96
executables and the Windows registry
91
- and a few more.
92
-
97
+ and a few more. See ` all available package parsers < https://scancode-toolkit.readthedocs.io/en/stable/reference/available_package_parsers.html >`_
98
+ for the exhaustive list.
93
99
94
100
See our `roadmap <https://scancode-toolkit.readthedocs.io/en/latest/contribute/roadmap.html >`_
95
101
for upcoming features.
@@ -101,11 +107,11 @@ Documentation
101
107
The ScanCode documentation is hosted at
102
108
`scancode-toolkit.readthedocs.io <https://scancode-toolkit.readthedocs.io/en/latest/ >`_.
103
109
104
- If you are new to Scancode , start with our
110
+ If you are new to visualization of scancode results data , start with our
105
111
`newcomer <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/newcomer.html >`_ page.
106
112
107
- If you want to compare output changes between different versions of Scancode ,
108
- or want to look at scans generated by Scancode , review our
113
+ If you want to compare output changes between different versions of ScanCode ,
114
+ or want to look at scans generated by ScanCode , review our
109
115
`reference scans <https://github.com/nexB/scancode-toolkit-reference-scans >`_.
110
116
111
117
Other Important Documentation Pages:
@@ -134,21 +140,23 @@ Installation
134
140
135
141
Before installing ScanCode make sure that you have installed the prerequisites
136
142
properly. This means installing Python 3.8 for x86/64 architectures.
137
- We support Python 3.8, 3.9 and 3.10 .
143
+ We support Python 3.8, 3.9, 3.10 and 3.11 .
138
144
139
145
See `prerequisites <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#prerequisites >`_
140
146
for detailed information on the support platforms and Python versions.
141
147
142
148
There are a few common ways to `install ScanCode <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html >`_.
143
149
144
- - **Installation as an application: Install Python 3.8, download a release archive, extract and run **. ` This is the recommended installation method.
150
+ - ` **Installation as an application: Install Python 3.8, download a release archive, extract and run**.
145
151
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-as-an-application-downloading-releases> `_
152
+ This is the recommended installation method.
146
153
147
154
- `Development installation from source code using a git clone
148
155
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-from-source-code-git-clone> `_
149
156
150
157
- `Development installation as a library with "pip install scancode-toolkit"
151
158
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#pip-install> `_
159
+ [Note that this is not supported on arm64 machines]
152
160
153
161
- `Run in a Docker container with a git clone and "docker run"
154
162
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-via-docker> `_
@@ -157,20 +165,17 @@ There are a few common ways to `install ScanCode <https://scancode-toolkit.readt
157
165
Quick Start
158
166
===========
159
167
160
- Note the `commands variation <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#commands-variation >`_
161
- across installation methods and platforms.
168
+ After ScanCode is installed successfully you can run an example scan printed on screen as JSON::
162
169
163
- You can run an example scan printed on screen as JSON::
164
-
165
- ./scancode -clip --json-pp - samples
170
+ scancode -clip --json-pp - samples
166
171
167
172
Follow the `How to Run a Scan <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_run_a_scan.html >`_
168
173
tutorial to perform a basic scan on the ``samples `` directory distributed by
169
- default with Scancode .
174
+ default with ScanCode .
170
175
171
176
See more command examples::
172
177
173
- ./ scancode --examples
178
+ scancode --examples
174
179
175
180
See `How to select what will be detected in a scan
176
181
<https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_set_what_will_be_detected_in_a_scan.html> `_
@@ -208,15 +213,13 @@ https://github.com/nexB/scancode-toolkit/issues
208
213
For discussions and chats, we have:
209
214
210
215
* an official Gitter channel for `web-based chats
211
- <https://gitter.im/aboutcode-org/discuss> `_.
212
- Gitter is also accessible via an `IRC bridge <https://irc.gitter.im/ >`_.
216
+ <https://matrix.to/#/#aboutcode-org_discuss:gitter.im> `_.
217
+ Gitter is now accessible through `Element <https://element.io/download >`_
218
+ or an `IRC bridge <https://matrix-org.github.io/matrix-appservice-irc/latest/usage.html >`_.
213
219
There are other AboutCode project-specific channels available there too.
214
220
215
- * an official `#aboutcode ` IRC channel on liberachat (server web.libera.chat).
216
- This channel receives build and commit notifications and can be noisy.
217
- You can use your favorite IRC client or use the `web chat
218
- <https://web.libera.chat/?#aboutcode> `_.
219
-
221
+ * The discussion channel for `scancode <https://matrix.to/#/#aboutcode-org_scancode:gitter.im >`_
222
+ specifically aimed at users and developers using scancode-toolkit.
220
223
221
224
Source code and downloads
222
225
=========================
@@ -225,7 +228,8 @@ Source code and downloads
225
228
* https://github.com/nexB/scancode-toolkit.git
226
229
* https://pypi.org/project/scancode-toolkit/
227
230
* https://github.com/nexB/scancode-thirdparty-src.git
228
-
231
+ * https://github.com/nexB/scancode-plugins.git
232
+ * https://github.com/nexB/thirdparty-packages.git
229
233
230
234
License
231
235
=======
@@ -240,14 +244,18 @@ See the NOTICE file and the .ABOUT files that document the origin and license of
240
244
the third-party code used in ScanCode for more details.
241
245
242
246
243
- .. |appveyor | image :: https://ci.appveyor.com/api/projects/status/4webymu0l2ip8utr?svg=true
244
- :target: https://travis-ci.org/nexB/scancode-toolkit
245
- :alt: Appveyor tests status (Windows)
246
-
247
247
.. |azure | image :: https://dev.azure.com/nexB/scancode-toolkit/_apis/build/status/nexB.scancode-toolkit?branchName=develop
248
248
:target: https://dev.azure.com/nexB/scancode-toolkit/_build/latest?definitionId=1&branchName=develop
249
249
:alt: Azure tests status (Linux, macOS, Windows)
250
250
251
251
.. |docs-rtd | image :: https://readthedocs.org/projects/scancode-toolkit/badge/?version=latest
252
252
:target: https://scancode-toolkit.readthedocs.io/en/latest/?badge=latest
253
253
:alt: Documentation Status
254
+
255
+ .. |docs-github-actions | image :: https://github.com/nexB/scancode-toolkit/actions/workflows/docs-ci.yml/badge.svg?branch=develop
256
+ :target: https://github.com/nexB/scancode-toolkit/actions/workflows/docs-ci.yml
257
+ :alt: Documentation Tests
258
+
259
+ .. |release-github-actions | image :: https://github.com/nexB/scancode-toolkit/actions/workflows/scancode-release.yml/badge.svg?event=push
260
+ :target: https://github.com/nexB/scancode-toolkit/actions/workflows/scancode-release.yml
261
+ :alt: Release tests
0 commit comments