FAQ: Does ScanCode work completely offline?
评估
- 难度
- 1/5
- 预计耗时
- 1 小时以内
- 新手友好度
- 45/100
- Issue 类型
- 文档
- 描述清晰度
- 基本清楚
- 活跃度
- 停滞
- 技术栈
- markdown
调研方向
首先，在 Docusaurus/Markdown 网站仓库中定位相关的 FAQ 内容。使用 issue 的简短答案和详细答案，明确离线行为以及依赖网络的集成，然后验证渲染后的页面包含该说明和注意事项。
由索引模型根据 Issue 内容生成。
描述
Question:
re: https://aboutcode.org/scancode/
Please consider adding a bullet point that states whether ScanCode requires network access.
That is, does it work completely offline or does it have to send signatures/source code to a third-party system?
We cannot run any tools on our code base without assurance that the code will remain on-prem.
I suspect ScanCode runs completely offline, but it would be great to have that clearly and explicitly stated somewhere
Short answer: Yes
ScanCode does not "phone home", works completely offline and does NOT send signatures/source code to a third-party system.
Long answer:
-
ScanCode Toolkit can query pypi.org (which is not under our control but under Python.org control) to inquire if there is a new version https://github.com/aboutcode-org/scancode-toolkit/blob/f605c083e3ea7262a18f02bdee61b208921d69f6/src/scancode/outdated.py#L136 to alter if so. This can be disabled with CLI flag (https://github.com/aboutcode-org/scancode-toolkit/blob/f605c083e3ea7262a18f02bdee61b208921d69f6/src/scancode/cli.py#L376)
Everything is air-gapped alright. -
ScanCode.io scans code locally on your installation, completely air-gapped. The default installation comes configured for testing to work with the public APIs of :
- VulnerableCode https://public.vulnerablecode.io/
- PurlDB and MatchCode (for actual matching with signatures) https://public.purldb.io/api/
-
A local deployment of VulnerableCode works from continuously importing data from all over the vulnerability databases and the package registries. You can elect not to run the importers and data improvers, but then you get not data and no value. You can import and sync a db from a backup from a network that has access to the internet to an an air-gapped isolated network all right.
-
A local deployment of PurlDB and MatchCode is conceptually similar to VulnerableCode ... but it only looks at the package registries and download packages for fingerprinting (to enable code matching). Same for the sync.
-
DejaCode runs locally too. It integrates with a ScanCode.io deployment, a VulnerableCode deployment and a PurlDB deployment.
If you want to use VulnerableCode, PurlDB and MatchCode features with ScanCode.io or DejaCode, you will need to install these locally and configure them accordingly or else these will not work.
- 主要语言
- JavaScript
- 星标
- 9
- 派生
- 17
- 平均合并
- 7 小时 55 分钟
- 30 天内合并 PR
- 2
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
aboutcode-org/www.aboutcode.org 的其他 Issue
-
Making all post button.可能已有人在做 @sarthaklole 于 70 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 72/100
aboutcode-org/www.aboutcode.org#117 · 3 条评论 ·
-
WWW: Reduce frequency of update-releases可能重新可做 @johnmhoran 于 51 天前认领，目前没有进行中的 PR。 未关闭ci-workflow
难度 2/5 1-3 小时 新手友好度 45/100
aboutcode-org/www.aboutcode.org#180 · 已指派 1 人 ·
-
DOCS: Create new AboutCode stack diagram(s)可能重新可做 @hixvikas 于 52 天前认领，目前没有进行中的 PR。 未关闭documentation
难度 5/5 一周以上 新手友好度 35/100
aboutcode-org/www.aboutcode.org#166 · 1 条评论 ·
-
WWW: Create About top level page?可能已有人在做 @pombredanne 于 154 天前认领。 未关闭website
难度 2/5 1-3 小时 新手友好度 35/100
aboutcode-org/www.aboutcode.org#164 · 1 个 reaction · 已指派 1 人 ·
-
WWW: Add Initiatives and grant Projects可能重新可做 @mjherzog 于 241 天前认领，目前没有进行中的 PR。 未关闭enhancement needs design website
难度 5/5 一周以上 新手友好度 25/100
aboutcode-org/www.aboutcode.org#141 · 已指派 1 人 ·
查看 aboutcode-org/www.aboutcode.org 的全部 Issue
相似的 Issue
-
ep:WebGPU platform:web quantization
难度 2/5 1-3 小时 新手友好度 66/100
microsoft/onnxruntime#33752 ·
维护者通常 2 天内回复
-
icon request
难度 2/5 1-3 小时 新手友好度 66/100
tabler/tabler-icons#1693 ·
维护者通常 1 天内回复
-
难度 1/5 1-3 小时 新手友好度 72/100
alvarotrigo/fullPage.js#4755 ·
-
难度 2/5 1-3 小时 新手友好度 64/100
jlab-sensing/ENTS-backend#854 ·
-
enhancement
难度 2/5 1-3 小时 新手友好度 76/100
andromarces/agent-loops#1242 ·
维护者通常 1 天内回复