The CNCF requires that we adopt either Snyk or Fossa for license scanning. We tried Snyk, but it wasn't ideal - it bundles security and license scanning, and both were high-noise.
Fossa is much lower-noise. This project is already onboarded through the Fossa UI, with a clean bill of health. This PR contains some finishing touches:
The CNCF requires that we adopt either Snyk or Fossa for license scanning. We tried Snyk, but it wasn't ideal - it bundles security and license scanning, and both were high-noise.
Fossa is much lower-noise. This project is already onboarded through the Fossa UI, with a clean bill of health. This PR contains some finishing touches: