Check License Compliance
5.7#24 in open source license compliance softwareFree planFree planLinuxSelf-hosted
Visit
| Fact | Check License Compliance | FOSSology |
|---|---|---|
| Deployment | The GitHub Action runs using a Docker image defined by the repository's Dockerfile. | The project describes installation using Docker, Vagrant with VirtualBox, or source installation. |
| Purpose | Checks repository dependencies against allowed, forbidden, and warning license policies. | FOSSology is an open-source license-compliance system and toolkit for scanning software for license, copyright, and export-control information. |
| Reports | Results can be reported as text, Markdown, or JSON, including details about noncompliant dependencies, their installation paths, and licenses. | FOSSology can generate SPDX 2.0 exports, Debian copyright files, hierarchical file lists with license identifiers, and Readme files containing identified license texts and copyright information. |
This action suits development teams enforcing license rules in GitHub repositories. It is useful for projects using NPM, PyPI, Maven, or Go dependencies.
FOSSology is aimed at companies, individuals, and groups seeking to improve their open-source license compliance processes. It may also suit teams that need scan results and reports integrated into CI/CD workflows.