In this webinar, AboutCode lead maintainer Philippe Ombredanne introduces ScanCode.io, and explains the challenges of scanning Docker images for provenance analysis. Philippe then demonstrates how to use ScanCode.io for Software Composition Analysis (SCA) with Docker images.
ScanCode is the most effective and efficient open source tool for SCA, used and trusted by most of the major tech companies. With ScanCode.io, you can analyze a complete container or VM image, a specific single application package, or a customized pipeline.
ScanCode is 100% open source under Apache 2.0 and other business-friendly licenses, and supports all programming languages and environments.
SLIDES