search

aboutcode-org / scancode.io

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!
https://scancodeio.readthedocs.io
Apache License 2.0
115 stars 85 forks source link

Android APK D2D: Map converted JARs to Java source code #1373

Closed pombredanne closed 1 month ago

pombredanne commented 2 months ago

This is a mapping step in the map deployed to devel that should take place after extraction from classes.dex and similar.

JonoYang commented 1 month ago

In the android_inspector android apk d2d pipeline, we call jadx on classes.dex files from extracted apks and jars and then perform path matching of the jadx output on the source codebase.

pombredanne commented 1 month ago

This is merged with #1391 which adds the new android-inspector pipeline to SCIO. See: