ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!
When I add archives as inputs, I never have access to the input resource details for the archives, like checksums and other scancode tk "info" for that file.
These should available as they are important to match against the purldb in particular for container image and image layers.
When I add archives as inputs, I never have access to the input resource details for the archives, like checksums and other scancode tk "info" for that file.
These should available as they are important to match against the purldb in particular for container image and image layers.