Skip to content

Conversation

@tdruez
Copy link
Contributor

@tdruez tdruez commented Sep 12, 2025

This workflow:

  1. Analyze a Docker image using ScanCode.io
  2. Generates an ORT package-file.yml from the SCIO project results
  3. Generates an ORT analyzer-result.yml using create-analyzer-result-from-package-list
  4. Run the ORT report on analyzer-result.yml to generate a CycloneDX and SpdxDocument

Signed-off-by: tdruez <[email protected]>
@tdruez tdruez merged commit cbb8679 into main Sep 15, 2025
14 checks passed
@tdruez tdruez deleted the 1727-sca-integration-scio-to-ort-workflow branch September 15, 2025 10:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants