Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.scanoss.com/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

​
Complete SCANOSS Guide

Follow this guide to evaluate all SCANOSS capabilities for your organisation.

​
Desktop Integration

Start by testing SCANOSS locally on your development machine:
  1. Install SCANOSS-PY and SCANOSS-CC
  2. Navigate to your project directory
  3. Run a scan with SCANOSS-PY or SCANOSS-CC
  4. Declare components using SCANOSS-CC or SCANOSS Settings
  5. Setup Pre-Commit Hooks
  6. Test pre-commit by making a commit

​
CI/CD Integration

Automate scanning in your CI/CD pipeline:
  1. Setup GitHub Actions workflow
  2. Configure API secrets
  3. Set trigger events (push, pull requests)
  4. Define compliance policies
  5. Review scan results
  6. Download SBOMs from workflow artifacts

​
Advanced Analysis

Extend your analysis with encryption and security scanning:
  1. Run encryption scan to detect algorithms
  2. Review detected cryptographic implementations
  3. Run vulnerability scan to identify CVEs
  4. Assess risk levels for detected vulnerabilities
  5. Export comprehensive reports using SBOM Workbench

​
Continuous Monitoring

Establish ongoing monitoring and compliance:
  1. Integrate with Dependency Track for continuous monitoring
  2. Track vulnerabilities and components over time
  3. Setup ORT Integration for compliance automation
  4. Define policy rules for your organization
  5. Generate compliance reports automatically
  6. Monitor alerts and prioritize remediation

​
Explore by Section