Software Composition
DeepScan - assessing your code for effective licenses
Gaining insights and profit from sharing
In this talk I want to present the recently open sourced deepscan tooling, which allows the comfortable analysis of repositories for effective licenses, copyrights and known files. I will show how the tool is structured and how it works. How the similarity analysis is used and what the current results are. Also I will demonstrate how the free analysis service can be used and how it may be used to review and re-assess findings.
Additional information
| Type | devroom |
|---|
More sessions
| 2/7/21 |
Welcome to the Software Composition Analysis Devroom
|
| 2/7/21 |
In this session we will provide an update on OSS Review Toolkit (ORT) - which features have been recently added and what they ORT team is currently working on.
|
| 2/7/21 |
This is a presentation of the latest features and updates in ScanCode toolkit and its companion projects.
|
| 2/7/21 |
FOSSology focusses on license compliance analyses. Recently, a number of new features have been published by the community to integrate better with software composition analysis. The presentation shows an introduction of the main and relevant development here.
|
| 2/7/21 |
Software Composition Analysis (SCA) tools perform source-code analysis, comparison and identification of Open Source components. Sadly, none of the SCA vendors have embraced Open Source themselves, most of their tooling consists of proprietary code and their OSS Knowledge Bases are also closed.
|
| 2/7/21 |
Container and VM images contain many packages and are quite a challenge for composition analysis.
|
| 2/7/21 |
The very short time is some placeholder between presentation groups to have questions being asked and answered or just simple to have a break.
|
