oss-review-toolkit / ort

A suite of tools to automate software compliance checks.
https://oss-review-toolkit.org
Apache License 2.0
1.59k stars 309 forks source link

Allow to limit what entities (projects vs packages) get scanned #2349

Closed dd-jy closed 2 years ago

dd-jy commented 4 years ago

Hi, The scanner module works to scan including project id. And there is no option to exclude project id. But the downloader module has the option to select entities from the ORT file's analyzer result.

I think this option is also needed for the scanner. Because the ORT can be used for the companies' commercial project. And this case the project id should not excluded to scan.

Please consider adding this option.

sschuberth commented 4 years ago

And this case the project id should not excluded to scan.

I'm confused by this, the project is currently not excluded from the scan. But you are asking for it to be excluded, right?

dd-jy commented 4 years ago

Yes, that's right. Sorry for my poor English. ;(

sschuberth commented 4 years ago

Then we can basically implement this as suggested at https://github.com/heremaps/oss-review-toolkit/issues/2130, would you agree?

dd-jy commented 4 years ago

I agree. That's exactly what I mean.

sschuberth commented 4 years ago

Ok, great. Let me still leave this issue open to ensure that the feature to have a separate scanner for projects can also be used to specify no scanner at all for projects.