Dejacode
Automate open source license compliance and ensure software supply chain integrity
Install / Use
/learn @aboutcode-org/DejacodeREADME
======== DejaCode
DejaCode provides an enterprise-level application to automate open source license
compliance and ensure software supply chain integrity, powered by ScanCode <https://github.com/aboutcode-org/scancode-toolkit>_,
the industry-leading code scanner.
Why Use DejaCode?
DejaCode is your system of record as a single source of truth with quality data for licenses, vulnerabilities, and package provenance and metadata, enabling you to ensure FOSS compliance with enterprise-grade features and integrations for DevOps and software systems.
Getting Started
Instructions to get you up and running on your local machine are at Getting Started <https://dejacode.readthedocs.io/en/stable/index.html>_
The DejaCode documentation also provides:
- prerequisites for installing the software.
- instructions for configuring DejaCode integration with
ScanCode.io <https://github.com/aboutcode-org/scancode.io>,VulnerableCode <https://github.com/aboutcode-org/vulnerablecode>, andPurlDB <https://github.com/aboutcode-org/purldb>_. - tutorials that provide hands-on guidance to DejaCode features.
- how to setup usage policies.
- how to capture and share software inventories (SBOMs) in multiple file formats and standards, such as CycloneDX and SPDX.
- how to customize your own workflows and reports.
- guidelines for contributing to code development.
Contributing
Thank you for your interest in contributing to AboutCode projects.
Please read the following guidelines carefully <https://github.com/aboutcode-org/dejacode/blob/main/CONTRIBUTING.md>_ before getting started.
Build and tests status
+------------+-------------------+ | Tests | Documentation | +============+===================+ | |ci-tests| | |docs-rtd| | +------------+-------------------+
DejaCode License Notice
DejaCode is an enterprise-level application to automate open source license compliance and ensure software supply chain integrity, powered by ScanCode, the industry-leading code scanner.
SPDX-License-Identifier: AGPL-3.0-only
Copyright (c) nexB Inc., AboutCode and others
This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, version 3 of the License.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License along with this program. If not, see https://www.gnu.org/licenses/.
Commercial Services option
nexB offers a commercial services option for DejaCode. You can learn more about these options by contacting nexB at https://www.nexb.com/contact-us/
.. |ci-tests| image:: https://github.com/aboutcode-org/dejacode/actions/workflows/run-unit-tests.yml/badge.svg?branch=main :target: https://github.com/aboutcode-org/dejacode/actions/workflows/run-unit-tests.yml :alt: CI Tests Status
.. |docs-rtd| image:: https://readthedocs.org/projects/dejacode/badge/?version=latest :target: https://dejacode.readthedocs.io/en/latest/?badge=latest :alt: Documentation Build Status
Acknowledgements, Funding, Support and Sponsoring
This project is funded, supported and sponsored by:
- Generous support and contributions from users like you!
- the European Commission NGI programme
- the NLnet Foundation
- the Swiss State Secretariat for Education, Research and Innovation (SERI)
- Google, including the Google Summer of Code and the Google Seasons of Doc programmes
- Mercedes-Benz Group
- Microsoft and Microsoft Azure
- AboutCode ASBL
- nexB Inc.
|europa| |dgconnect|
|ngi| |nlnet|
|aboutcode| |nexb|
This project was funded through the NGI0 Entrust Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101069594.
|ngizeroentrust| https://nlnet.nl/project/CRAVEX/
.. |nlnet| image:: https://nlnet.nl/logo/banner.png :target: https://nlnet.nl :height: 50 :alt: NLnet foundation logo
.. |ngi| image:: https://ngi.eu/wp-content/uploads/thegem-logos/logo_8269bc6efcf731d34b6385775d76511d_1x.png :target: https://ngi.eu35 :height: 50 :alt: NGI logo
.. |nexb| image:: https://nexb.com/wp-content/uploads/2022/04/nexB.svg :target: https://nexb.com :height: 30 :alt: nexB logo
.. |europa| image:: https://ngi.eu/wp-content/uploads/sites/77/2017/10/bandiera_stelle.png :target: http://ec.europa.eu/index_en.htm :height: 40 :alt: Europa logo
.. |aboutcode| image:: https://aboutcode.org/wp-content/uploads/2023/10/AboutCode.svg :target: https://aboutcode.org/ :height: 30 :alt: AboutCode logo
.. |swiss| image:: https://www.sbfi.admin.ch/sbfi/en/_jcr_content/logo/image.imagespooler.png/1493119032540/logo.png :target: https://www.sbfi.admin.ch/sbfi/en/home/seri/seri.html :height: 40 :alt: Swiss logo
.. |dgconnect| image:: https://commission.europa.eu/themes/contrib/oe_theme/dist/ec/images/logo/positive/logo-ec--en.svg :target: https://commission.europa.eu/about-european-commission/departments-and-executive-agencies/communications-networks-content-and-technology_en :height: 40 :alt: EC DG Connect logo
.. |ngizerocore| image:: https://nlnet.nl/image/logos/NGI0_tag.svg :target: https://nlnet.nl/core :height: 40 :alt: NGI Zero Core Logo
.. |ngizerocommons| image:: https://nlnet.nl/image/logos/NGI0_tag.svg :target: https://nlnet.nl/commonsfund/ :height: 40 :alt: NGI Zero Commons Logo
.. |ngizeropet| image:: https://nlnet.nl/image/logos/NGI0PET_tag.svg :target: https://nlnet.nl/PET :height: 40 :alt: NGI Zero PET logo
.. |ngizeroentrust| image:: https://nlnet.nl/image/logos/NGI0Entrust_tag.svg :target: https://nlnet.nl/entrust :height: 38 :alt: NGI Zero Entrust logo
.. |ngiassure| image:: https://nlnet.nl/image/logos/NGIAssure_tag.svg :target: https://nlnet.nl/image/logos/NGIAssure_tag.svg :height: 32 :alt: NGI Assure logo
.. |ngidiscovery| image:: https://nlnet.nl/image/logos/NGI0Discovery_tag.svg :target: https://nlnet.nl/discovery/ :height: 40 :alt: NGI Discovery logo
