search

google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.28k stars 363 forks source link

Support running license scan independently #965

Open shahar-h opened 7 months ago

shahar-h commented 7 months ago

Currently license scan (--experimental-licenses flag) runs along with vulnerabilities scan. In our case we want to run vulnerabilities scan recursively(with -r flag) but license scan should be run only on root folder. Adding support for running only license scan will help. Other option is support a dedicated recursive flag for license scan.

github-actions[bot] commented 4 months ago

This issue has not had any activity for 60 days and will be automatically closed in two weeks

github-actions[bot] commented 2 months ago

This issue has not had any activity for 60 days and will be automatically closed in two weeks

See https://github.com/google/osv-scanner/blob/main/CONTRIBUTING.md for how to contribute a PR if you're interested in helping out.