Skip to content
Snippets Groups Projects

Update to license_scanning_of_cyclonedx_files to fix inaccuracy

Merged John Crowley requested to merge doc-license-extraction-update-for-inaccuracy into master
1 file
+ 1
1
Compare changes
  • Side-by-side
  • Inline
@@ -18,7 +18,7 @@ To detect the licenses in use, License Compliance relies on running the
and analyzing the [CycloneDX](https://cyclonedx.org/) Software Bill of Materials (SBOM) generated by those jobs.
Other 3rd party scanners may also be used as long as they produce a CycloneDX file with a list of dependencies for [one of our supported languages](#supported-languages-and-package-managers).
This method of scanning is also capable of parsing and identifying over 500 different types of licenses, as defined in [the SPDX list](https://spdx.org/licenses/).
Licenses not in the SPDX list are reported as "Unknown". License information can also be extracted from packages that are dual-licensed, or have multiple different licenses that apply.
Licenses not in the SPDX list are reported as "Unknown".
## Configuration
Loading