Security
Scan code for origin, license and vulnerabilities
2 projects
ScanCode-Toolkit relies on "required phrases" to prevent false positive license detections, but 74% of its rules currently lack this protection. To...
Currently, VulnerableCode lacks built-in insights to demonstrate its effectiveness. This project addresses this by integrating a telemetry dashboard...
5 projects
The current directory browsing experience in ScanCode.io is limited to viewing one folder at a time, which becomes inefficient and cumbersome for...
This project focuses on improving the accuracy and clarity of the detection_log by explicitly identifying when extra-words are detected during...
This project is about simplifying it to use ScanCode Toolkit and ScanCode.io in common CI/CD systems such as GitHub Actions, GitLab, Jenkins, and...
Currently, VulnerableCode runs importers in bulk where all the data from advisories are imported (and reimported) at once and stored to be displayed...
This project focuses to enhance SCIO by introducing a feature to store and manage packages that are downloaded and scanned. The goal is to add...
4 projects
Implement a Firefox/Chrome browser extension that enables users to use VulnTotal from their browser. The idea is to use Pyodide to run the existing...
There is a large number of pending tickets for data sources. This project focuses on adding more and more vulnerability data sources and consume...
I am developing a pypi package which will be responsible for calling OpenSSF scorecard API or CLI with an open-source github link and fetching the...
The project aims to improve scanning accuracy by computing summary and license clarity scores for each package and its files, rather than for the...
2 projects
Currently sctk uses pyahocorasick intbitset for license detection & lxml for creating cyclonedx-xml output formats. All three of them are currently...
Software packages vulnerabilities : let's say we have a security team that wants to track new vulnerabilities in the open source software packages ,...
5 projects
Create a web app and JSON Rest API to detect any text for license, and submit bugs (SCTK-aaS). This project is to create a web-based mini application...
Refactor workbench to a React + Typescript implementation and improve various sections of the application including Table view, file uploads, data...
VulnerableCode is a unique project that collates FOSS vulnerability data from numerous sources. This VulnTotal project will help cross-validate the...
When doing license detection, ScanCode uses the licenses and rules in the ScanCode LicenseDB. The goal of this project is to extend the capabilities...
There is a large number of pending tickets for data sources. We want to search for more vulnerability data sources and consume them . So I will...
4 projects
This project aims to provide a way to implement and integrate the likes of Google Licenseclassifier, GitHub Licensee, and other license detection and...
The goal of this proposal is to refactor DeltaCode to use Scancode-Toolkit’s Virtual Codebase class. This refactoring will allow DeltaCode to be a...
Scancode uses various different techniques to detect licenses based on various multiple sequence alignments ,algorithms ,automations etc. but the...
VulnerableCode has a large number of pending tickets that require adding more data sources of known vulnerabilities (aka. importers). As importers...
5 projects
ScanCode is an opensource software and detects licenses, copyrights, package manifests & dependencies and more by scanning code. This allows to...
Software development is undergoing a gradual increase in pace. The direct result of this is more software vulnerabilities. Countless vulnerabilities...
Python 2.7 has already retired and it will no longer be maintained therefore it will better to drop the support of Python 2. It will also include...
ScanCode license detection is using multiple techniques to accurately detect licenses based on automatons, inverted indexes, and multiple sequence...
The goal of this project is to create a smart tool/library that provides a universal package and code download from VCS, web, ftp, etc.
3 projects
DeltaCode is a tool to compare and report scan differences. It takes JSON files as an input which is the output of ScanCode-toolkit as well. When...
About Code software scancode-toolkit currently is not available as distro's package and there is no official docker image available which is must...
Since Python 2.7 will retire in few months and no longer maintained.So it needs to be ported to python 3 and it must passed on both version of...
4 projects
Building a project which uses ScanCode as a library in a web and REST API application that allows you to scan code on demand by entering a URL and...
This project is based on the building a web app that can take the user input of the plain-text code or it can take the input as the URL from where...
The usage of any open source software is primarily guided by the licenses binding it. Individuals/Organisations, generally make the decision of using...
This project’s purpose is to create a decoupled plugin architecture for scancode such that it can handle plugins at different stages of a scan and...
