What's New

Transient network failures no longer abort an entire scan. Network errors, truncated responses, and 429/5xx status codes are now retried with exponential backoff. A server-provided Retry-After header continues to take precedence.
Chunks already held by the server are treated as successful. A 409 RANGE_CONFLICT response indicates the upload completed and no longer fails the scan.
Incomplete enrichment is now reported. Components left without data by a failed request are named on stderr, preventing a partial result from being mistaken for a complete one.

Config.RetryBackoffBase — the initial backoff interval, doubled on each subsequent attempt. Defaults to 250ms.

Config.MaxRetries now applies to all transient failures, not only to 429/503 responses carrying Retry-After. A negative value disables retries, consistent with Timeout.

Config.MaxRetryAfter has been renamed to Config.MaxServerRetryWait.
ChunkError.Index has been replaced by ChunkError.Purls, which identifies the components left without data.
Decoration pipeline results are now typed per layer. PipelineResult.Services is replaced by Licenses, Cryptography, Geoprovenance, and Vulnerabilities, each of type *Layer[T]. Unreadable responses are collected in Errors.
The scansource adapters no longer carry a From suffix: FromScanResult becomes Inventory, LicensesFrom becomes Licenses, and so on. LicenseKey becomes Key.

Install

Prebuilt binary: download the archive for your platform below, extract it,
and move scanoss-cli onto your PATH. On Linux (amd64):

tar xzf scanoss-cli-linux-amd64.tar.gz
sudo mv scanoss-cli /usr/local/bin/

Verify a download against checksums.txt:

sha256sum -c --ignore-missing checksums.txt

Go:

go install github.com/scanoss/scanoss.go/cmd/scanoss-cli@latest

See the README and
CLIENT_HELP.md
to get started.