> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanoss.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Getting Started

> This page helps you quickly navigate to the right resources based on what you want to accomplish.

This page has three ways in: the fastest single path to a working evaluation, a modular version of that same path for going deeper on each step, or a direct jump to the specific capability you want to test. If you're not sure where to start, use the first one.

## Start Here: The End-to-End Workflow

The [End-to-End Workflow](/en/latest/poc/evaluation/end-to-end) is the fastest way to see SCANOSS working across a full license-compliance lifecycle, in one guide, without jumping between pages. It takes you from an empty repo to:

* **Pre-commit hooks** catching undeclared open-source components before code is even committed
* **A GitHub Actions workflow** enforcing copyleft and undeclared-component policies on every pull request
* **Dependency-Track** managing vulnerabilities and organisation-wide licence policy over time

<Note>
  The End-to-End Workflow covers license compliance and vulnerability
  monitoring, but not encryption detection. If you also want to evaluate
  cryptographic algorithm scanning, add [Advanced Analysis](/en/latest/poc/evaluation/advanced-analysis)
  from the modular path below.
</Note>

Once you've run through it, see [Improving Scan Accuracy](/en/latest/poc/evaluation/improving-scan-accuracy) to reduce false positives and get more accurate results, worth doing early, since it builds directly on the components you just declared.

## Prefer to Go Step by Step?

The same ground, broken into four standalone pages, useful if you want to stop and go deeper at any point, revisit one step later, or you specifically want the encryption/vulnerability API evaluation that the End-to-End Workflow doesn't cover.

```mermaid theme={null}
graph TD
    Step1[Step 1:<br/>Desktop Integration] --> Step2[Step 2:<br/>CI/CD Integration]
    Step2 --> Step3[Step 3:<br/>Advanced Analysis]
    Step3 --> Step4[Step 4:<br/>Continuous Monitoring]

    style Step1 fill:#66BB6A,stroke:#43A047,stroke-width:3px,color:#fff
    style Step2 fill:#26A69A,stroke:#00897B,stroke-width:2px,color:#fff
    style Step3 fill:#AB47BC,stroke:#8E24AA,stroke-width:2px,color:#fff
    style Step4 fill:#EF5350,stroke:#E53935,stroke-width:2px,color:#fff

    click Step1 "/en/latest/poc/evaluation/desktop-integration" "Desktop Integration"
    click Step2 "/en/latest/poc/evaluation/cicd-integration" "CI/CD Integration"
    click Step3 "/en/latest/poc/evaluation/advanced-analysis" "Advanced Analysis"
    click Step4 "/en/latest/poc/evaluation/continuous-monitoring" "Continuous Monitoring"
```

| Step | Page                                                                     | You'll Accomplish                                                                                           |
| ---- | ------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------- |
| 1    | [Desktop Integration](/en/latest/poc/evaluation/desktop-integration)     | Install SCANOSS-PY and SCANOSS-CC, run your first local scan, and set up pre-commit hooks.                  |
| 2    | [CI/CD Integration](/en/latest/poc/evaluation/cicd-integration)          | Move that scan into a GitHub Actions workflow, so every push and pull request is checked automatically.     |
| 3    | [Advanced Analysis](/en/latest/poc/evaluation/advanced-analysis)         | Add encryption and vulnerability scanning to assess cryptographic usage and CVE risk.                       |
| 4    | [Continuous Monitoring](/en/latest/poc/evaluation/continuous-monitoring) | Connect Dependency-Track, and optionally OSS Review Toolkit, for ongoing tracking and compliance reporting. |

## Jump to a Topic

Already know what you want to evaluate, without a guided path at all? Go straight to it:

| Section                                                                      | What You'll Find                                                |
| ---------------------------------------------------------------------------- | --------------------------------------------------------------- |
| [License Dataset](/en/latest/poc/datasets/license-dataset)                   | Component identification and license compliance                 |
| [Encryption Dataset](/en/latest/poc/datasets/encryption-dataset)             | Cryptographic algorithm detection                               |
| [Security Dataset](/en/latest/poc/datasets/security-dataset)                 | Vulnerability and CVE management                                |
| [Interfaces & Integrations](/en/latest/poc/interfaces-integrations)          | SDKs, direct REST API access, CI/CD automation, and proxy setup |
| [Improving Scan Accuracy](/en/latest/poc/evaluation/improving-scan-accuracy) | Reduce false positives with scan context and snippet tuning     |