Skip to main content

SCANOSS

ScanOss

An advisor that uses a SCANOSS instance to determine vulnerabilities in dependencies.

Description​

An AdviceProvider implementation that obtains security vulnerability information from a SCANOSS instance.

Configuration​

Example​

Use the following syntax to configure this plugin globally as part of config.yml:

ort:
  advisor:
    advisors:
      ScanOss:
        options:
          apiUrl: "https://api.scanoss.com"
        secrets:
          apiKey: <OPTIONAL_SECRET>

Options​

apiUrl​

STRING Default

The URL of the SCANOSS server.

apiKey​

SECRET Required

The API key used to authenticate with the SCANOSS server.