anchore / grant

Search an SBOM for licenses and the packages they belong to
Apache License 2.0
69 stars 7 forks source link

feat: spdx license list generation #3

Closed spiffcs closed 11 months ago

spiffcs commented 11 months ago

This adds an spdxlicense.Index autogenerated from the https://spdx.org/licenses/licenses.json endpoint. Grant uses similar code to do this that syft does. The exceptions are as follows: