Open Source Scanning: A Technical Perspective on Which Files to Scan
When preparing to scan your application development projects for open source software, one simple approach is to point your scanner at the root directory of your development system. But that is probably not the most efficient approach, and results may include many open source components that are not actually part of your application. Or worse, the scanner may miss components that are not present in the build environment. There are many reasons to be careful and selective about what you scan and why. Here’s a short list of considerations when preparing to scan and determine the open source used in your application.
Read More »



