I think we should consider using ScanCode, or ScanCode.io, but not scanpipe as a toolname.
"headers": [
{
"tool_name": "scanpipe",
"tool_version": "34.9.4",
"other_tools": [
"pkg:pypi/scancode-toolkit@32.3.2"
],
"notice": "Generated with ScanCode.io and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied.\nNo content created from ScanCode.io should be considered or used as legal advice.\nConsult an Attorney for any legal advice.\nScanCode.io is a free software code scanning tool from nexB Inc. and others\nlicensed under the Apache License version 2.0.\nScanCode is a trademark of nexB Inc.\nVisit https://github.com/nexB/scancode.io for support and download.\n",
"uuid": "44ef30fb-ad4d-4f81-959b-7a574eb9fa3e",
"created_date": "2025-01-21T16:48:31.530Z",
"notes": "",
"settings": {},
"input_sources": [
{
"uuid": "50707e59-fc49-45e1-87b6-df13c80418d9",
"filename": "javax.annotation-83417807ad402ee1022c0307208d4510c80c68b6.zip",
"download_url": "https://github.com/javaee/javax.annotation/archive/83417807ad402ee1022c0307208d4510c80c68b6.zip",
"is_uploaded": false,
"tag": "",
"size": 54853,
"is_file": true,
"exists": true
}
],
"runs": [
{
"pipeline_name": "scan_single_package",
"status": "success",
"description": "Scan a single package archive (or package manifest file).",
"selected_groups": null,
"selected_steps": null,
"uuid": "3bda9141-01ce-4c9c-97ac-674b685d01b5",
"created_date": "2025-01-21T16:48:31.532524Z",
"scancodeio_version": "34.9.4",
"task_id": "3bda9141-01ce-4c9c-97ac-674b685d01b5",
"task_start_date": "2025-01-21T16:48:31.570517Z",
"task_end_date": "2025-01-21T16:48:38.011315Z",
"task_exitcode": 0,
"task_output": "",
"log": "2025-01-21 16:48:31.572 Pipeline [scan_single_package] starting\n2025-01-21 16:48:31.575 Step [download_missing_inputs] starting\n2025-01-21 16:48:31.578 Fetching input from https://github.com/javaee/javax.annotation/archive/83417807ad402ee1022c0307208d4510c80c68b6.zip\n2025-01-21 16:48:32.367 Step [download_missing_inputs] completed in 1 seconds\n2025-01-21 16:48:32.371 Step [get_package_input] starting\n2025-01-21 16:48:32.373 Step [get_package_input] completed in 0 seconds\n2025-01-21 16:48:32.376 Step [collect_input_information] starting\n2025-01-21 16:48:32.380 Step [collect_input_information] completed in 0 seconds\n2025-01-21 16:48:32.383 Step [extract_input_to_codebase_directory] starting\n2025-01-21 16:48:32.409 Step [extract_input_to_codebase_directory] completed in 0 seconds\n2025-01-21 16:48:32.412 Step [extract_archives] starting\n2025-01-21 16:48:32.555 Step [extract_archives] completed in 0 seconds\n2025-01-21 16:48:32.568 Step [run_scan] starting\n2025-01-21 16:48:37.690 Step [run_scan] completed in 5 seconds\n2025-01-21 16:48:37.694 Step [load_inventory_from_toolkit_scan] starting\n2025-01-21 16:48:37.974 Step [load_inventory_from_toolkit_scan] completed in 0 seconds\n2025-01-21 16:48:37.977 Step [make_summary_from_scan_results] starting\n2025-01-21 16:48:38.006 Step [make_summary_from_scan_results] completed in 0 seconds\n2025-01-21 16:48:38.009 Pipeline completed in 6 seconds\n",
"execution_time": 6
}
I think we should consider using ScanCode, or ScanCode.io, but not scanpipe as a toolname.