Skip to content

Releases: scanoss/scanoss.py

v1.41.0

17 Nov 16:17
a42511a

Choose a tag to compare

What's Changed

Added

  • Added --license-sources (-ls) option to copyleft inspection
    • Filter which license sources to check (component_declared, license_file, file_header, file_spdx_tag, scancode)
    • Supports both -ls source1 source2 and -ls source1 -ls source2 syntax

Changed

  • Switched to OSADL authoritative copyleft license data

    • Copyleft detection now uses OSADL (Open Source Automation Development Lab) checklist data
    • Adds missing -or-later license variants (GPL-2.0-or-later, GPL-3.0-or-later, LGPL-2.1-or-later, etc.)
    • Expands copyleft coverage from 21 to 32 licenses
    • Custom include/exclude/explicit filters still use legacy behavior for backward compatibility
    • Dataset attribution added to README (CC-BY-4.0 license)
  • Copyleft inspection now defaults to component-level licenses only (component_declared, license_file)

    • Reduces noise from file-level license detections (file_header, scancode)
    • Use -ls to override and check specific sources

Fixed

  • Fixed the terminal cursor disappearing after aborting scan with Ctrl+C

Full Changelog: v1.40.1...v1.41.0

v1.40.1

29 Oct 14:59
4060c9f

Choose a tag to compare

What's New

Changed

  • Refactored inspect module structure for better organization
    • Reorganized inspection modules into policy_check and summary subdirectories
    • Moved copyleft and undeclared component checks to policy_check/scanoss/
    • Moved component, license, and match summaries to summary/
    • Moved Dependency Track policy checks to policy_check/dependency_track/
    • Extracted common scan result processing logic into ScanResultProcessor utility class
    • Improved type safety with PolicyOutput named tuple for policy check results
    • Made PolicyCheck class explicitly abstract with ABC

Added

  • Added Makefile targets for running ruff linter (linter, linter-fix, linter-docker, linter-docker-fix)

v1.39.0

27 Oct 15:10

Choose a tag to compare

## What's Changed

Added

  • Added glc-codequality format to convert subcommand
  • Added inspect gitlab matches subcommand to generate GitLab-compatible Markdown match summary from SCANOSS scan results
  • Added utility modules for shared functionality (markdown_utils.py and file_utils.py)

Changed

  • Refactored table generation utilities into shared markdown_utils module
  • Refactored JSON file loading into shared file_utils module

v1.35.0

07 Oct 15:18
01b5281

Choose a tag to compare

[SP-3346] feat: use gRPC by default instead of REST (#154)

v1.34.0

06 Oct 14:42
26973c2

Choose a tag to compare

[SP-3346] feat: allow REST on decoration services (#153)

* [SP-3346] feat: add REST support for decoration services

* [SP-3346] chore: pr comments

* [SP-3346] fix: lint error

* [SP-3346] chore: update changelog, bump version

* [SP-3346] fix: license service api call

* [SP-3346] fix: lint error

* [SP-3346] fix: lint errors

* [SP-3346] fix: retry errors

* [SP-3346] chore: update changelog release date

v1.32.0

18 Sep 11:25
84eee42

Choose a tag to compare

Add REST support for dependencies and vulnerabilities

* add REST support for dependencies and vulnerabilities

* updated scanoss-py to v1.32.0

* fix issue with api key as evn

v1.30.0

24 Jul 15:52

Choose a tag to compare

What's Changed

  • [SP-2879] feat: add export dt sub-command, add cyclonedx input file validation

Full Changelog: v1.29.0...v1.30.0

v1.29.0

15 Jul 13:52
0862aa1

Choose a tag to compare

Merge pull request #138 from scanoss/bugfix/mdaloia/132-python-3738-i…

v1.26.2

24 Jun 18:18
663ef16

Choose a tag to compare

## What's Changed

Fixed

  • Fixed inspection of undeclared components with empty licenses

v1.26.1

23 Jun 12:38
116a3b1

Choose a tag to compare

What's Changed

Added

  • Added component count to inspect license summary

Full Changelog: v1.26.0...v1.26.1