Skip to content

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jul 17:43
· 45 commits to main since this release
v0.5.0
9eda14d

Changelog

New

  • Replace rules now work. If your settings file says "swap component A for
    component B," scan results are now actually rewritten to show component B.
    Before, the rule was sent to the server but the results still showed the old
    component. Rules can target a package, a file path, or both — when more than
    one rule matches, the most specific one is used.
    (The license field in replace rules isn't supported yet.)

Fixed

  • Progress bars no longer go backwards or finish before reaching 100%.
  • Scans no longer hang forever when the session expires — you now get an error.
  • Running a command without its required input now fails clearly instead of
    quietly reporting success. (scanoss-cli scan with an empty folder variable
    used to look like it worked.)
  • Fixed a crash when the scan pipeline was started without a client.
  • Enrichment steps now appear as soon as they start, not after the first result.

Changed

  • Scan status is checked every 2 seconds instead of 5, so progress updates faster.
  • --default-filters is replaced by two clearer flags: --all-extensions and
    --all-folders.

Breaking changes

Progress reporting was redesigned around reporters instead of callbacks:

  • Removed: Progress, ProgressFunc, WithProgress, PipelineProgress,
    DecorationPipeline.OnProgress, .Snapshot
  • Use instead: ScanReporter / DecorationReporter via WithScanReporter /
    WithDecorationReporter; decoration methods now take opts ...DecorateOption
  • pkg/scanpipeline reports all layers through Options.OnProgress, replacing
    OnCollect, OnFingerprint and OnDependencies
  • pkg/scanpipeline no longer parses --include; Layer, Set and
    ParseLayers moved to the CLI. Options now takes Services and
    SourceDeclared; Build and Enrich signatures changed
  • filter.Options.Defaults split into FileDefaults and FolderDefaults

Install

Prebuilt binary: download the archive for your platform below, extract it,
and move scanoss-cli onto your PATH. On Linux (amd64):

tar xzf scanoss-cli-linux-amd64.tar.gz
sudo mv scanoss-cli /usr/local/bin/

Verify a download against checksums.txt:

sha256sum -c --ignore-missing checksums.txt

Go:

go install github.com/scanoss/scanoss.go/cmd/scanoss-cli@latest

See the README and
CLIENT_HELP.md
to get started.

Assets 21
Loading