aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
https://github.com/aboutcode-org/scancode-toolkit/releases/
2.09k stars 541 forks source link

Ignored dotdirs are included in output file #3928

Open fleimgruber opened 1 week ago

fleimgruber commented 1 week ago

Description

Ignored (using the --ignore feature) dotdirs show up in the JSON output file.

How To Reproduce

scancode -v --ignore ".*" --json-lines=scancode.json -l --strip-root .

no dotdirs show up in the verbose output (they are still analyzed based on subjective execution time), but they are included in the "scancode.json" file. Same behavior using explicit non-glob patterns, e.g. --ignore ".venv".

System configuration

pombredanne commented 1 week ago

Thanks for the report!