Scanning Your Project

Scan your code for open source components, licenses, vulnerabilities, and dependencies using SCANOSS.

Scanning is the core functionality of SCANOSS-PY it fingerprints your code and compares it against the SCANOSS Knowledge Base to identify open source components, licenses, vulnerabilities, and security issues.

Quick Start

Scan a project folder and save results:

scanoss-py scan -o results.json /path/to/project

Understanding Scanning

When you run a scan, SCANOSS-PY:

1. Fingerprints your source code using the Winnowing algorithm
2. Compares fingerprints against the SCANOSS Knowledge Base
3. Identifies matching open source components
4. Detects licenses, vulnerabilities, and quality issues
5. Returns detailed results in JSON format

Unlike fingerprinting alone, scanning provides actionable intelligence about your code’s open source composition.