scanner.java

Simple Java implementation of a scanner for the OSSKB (Open Source KB).

Usage

Standalone

A jar with dependencies is generated by Maven Assembly plugin using mvn package.

Usage:

usage: scanner
 -blacklist <arg>    Scan and blacklist components in SBOM file
 -f,--format <arg>   Optional format for the scan result. One of: plain,
                     spdx, cyclonedx
 -h                  Shows usage
 -identify <arg>     Scan and identify components in SBOM file
 -ignore <arg>       Scan and ignore components in SBOM file
 -o,--output <arg>   Save output to file

Maven library

How does it work

This reference code illustrates the usage of the SCANOSS API to obtain file identification against the OSSKB without sending the actual code, but instead the WFP hashes

The provided FILE is read into memory, WFP fingerprints are calculated and sent to the OSSKB API

Results are printed via STDOUT.

License

scanner.java is released under the Apache 2.0 license. Please check the LICENSE file for further details.