search

google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.24k stars 360 forks source link

Support running license scan independently #965

Open shahar-h opened 6 months ago

shahar-h commented 6 months ago

Currently license scan (--experimental-licenses flag) runs along with vulnerabilities scan. In our case we want to run vulnerabilities scan recursively(with -r flag) but license scan should be run only on root folder. Adding support for running only license scan will help. Other option is support a dedicated recursive flag for license scan.

github-actions[bot] commented 3 months ago

This issue has not had any activity for 60 days and will be automatically closed in two weeks

github-actions[bot] commented 1 month ago

This issue has not had any activity for 60 days and will be automatically closed in two weeks

See https://github.com/google/osv-scanner/blob/main/CONTRIBUTING.md for how to contribute a PR if you're interested in helping out.