v1.5.1

Added support for STDIN.

Full Changelog: v1.5.0...v1.5.1

v1.5.0

Added support for reporting cryptographic algorithms to the CLI.

Full Changelog: v1.4.2...v1.5.0

v1.4.2

• Fixed custom certificate issue with --ca-cert
• Added certification chain download support to scanoss-py utils cdl

v1.4.0

• Added support for fast winnowing (15x improvement) thanks to a contribution from tardyp
  • This is enabled by a supporting package; scanoss_winnowing.
  • It can be installed using: pip3 install scanoss_winnowing
  • Or using: pip3 install --upgrade scanoss[fast_winnowing]

Proxy Auto-Config Support

Added the following features:

• Added support for Proxy Auto-Config (PAC) with --pac
• Upgraded gRCP/Protobuf dependencies to latest 1.51.x

Rate Limiting Support

Added the following features:

• Added x-request-id to all scanning requests to give better tracking of issues
• Added bad_request error log file to aid debug
• Added support for handling 503 service unavailable responses

Certificate Download Support

Added

• Added utils cert-download sub-command to help with the use of custom certificates
  • Included a local certificate download script leveraging openssl too: cert_download.sh
• Added documentation to help with certificate and proxy configuration

Proxy and Results Conversion Support

This release contains multiple features:

• Added support for proxy (--proxy) and certificates (--ca-certs) while scanning
  • Certificates can also be supplied using environment variables: REQUESTS_CA_BUNDLE & GRPC_DEFAULT_SSL_ROOTS_FILE_PATH
  • Proxies can be supplied using: grpc_proxy, https_proxy, http_proxy, HTTPS_PROXY, HTTP_PROXY
• Added snippet match fields to CSV output
• Added convert command to convert raw JSON reports into CSV, CycloneDX and SPDXLite
• Added utils certloc sub-command to print the location of Python's CA Cert file
  • This is useful to know where to append custom certificates to if needed

File statistics and multi-platform container images

This release contains a new sub command; scanoss-py file_count . which will produce file extension statistics for evaluating how much source code is in a folder.
It also contains multiple container platform (amd64 and arm64) images.

CycloneDX Vulnerability Details and Scan Obfuscation

This release contains vulnerability details in the CycloneDX output and adds support for filename obfuscation (--obfuscate) while scanning source files.