FOSSLight Scanner performs open source analysis after downloading the source by passing a link that can be cloned by wget or git.

Last update: Nov 03, 2022

Overview

FOSSLight Scanner

Analyze at once for Open Source Compliance.

FOSSLight Scanner performs open source analysis after downloading the source by passing a link that can be cloned by wget or git. Instead, open source analysis can be performed for the local source path. The output result is generated in FOSSLight Report format.

FOSSLight Source Scanner Extract license and copyright in the source code using ScanCode.
FOSSLight Dependency Scanner Extract dependency and OSS information from the package manager's manifest file.

FOSSLight Scanner

📋 Prerequisite

FOSSLight Scanner needs a Python 3.6+.

🎉 How to install

It can be installed using pip3. It is recommended to install it in the python 3.6 + virtualenv environment.

$ pip3 install fosslight_scanner

🚀 How to run

FOSSLight Scanner is run with the fosslight command.

Parameters

    -h                        Print help message
    -r                        Keep raw data 
    -p 
   
                     Path to analyze source
    -w 
                     Link to be analyzaed can be downloaded by wget or git clone
    -o 
                   Output Directory or file
    -f 
     
                     Output file format (excel, csv, opossum)
    -c 
      
                       Number of processes to analyze source
    -d 
       
         Additional arguments for running dependency analysis

Ref. Additional arguments for running dependency analysis. See the FOSSLight Dependency Guide for instructions.

Ex 1. Local Source Analysis

$ fosslight -p /home/source_path -a "-a 'source /test/Projects/venv/bin/activate' -d 'deactivate'"

Ex 2. Download Link and analyze

$ fosslight -o test_result_wget -w "https://github.com/LGE-OSS/example.git"

📁 Result

$ tree
.
├── fosslight_log
│   ├── fosslight_log_20210924_022422.txt
└── FOSSLight-Report_20210924_022422.xlsx

FOSSLight_Report-[datetime].xlsx : OSS Report format file that outputs source code analysis, binary analysis, and dependency analysis results.
fosslight_raw_data_[datetime] directory: Directory in which raw data files are created as a result of analysis

👏 How to report issue

Please report any ideas or bugs to improve by creating an issue in fosslight_scanner repository.
Then there will be quick bug fixes and upgrades. Ideas to improve are always welcome.

📄 License

FOSSLight Scanner is released under Apache-2.0.

Comments

does not work fosslight_scanner in Windows 10
Describe the bug does not work fosslight_scanner in Windows 10 Home 21H2

To Reproduce fosslight_scanner What are you going to analyze? (1/2) 1. Links that can be cloned by git or wget 2. Local source path 1 Enter the link to analyze:https://github.com/LGE-OSS/example

Expected behavior

Enter the link to analyze:https://github.com/LGE-OSS/example Link to download: https://github.com/LGE-OSS/example

FOSSLight Downloader - Result :False module 'signal' has no attribute 'SIGALRM' Download failed: module 'signal' has no attribute 'SIGALRM'

System environment (please complete the following information):

OS: Windows 10 Home 21H2

Python : python 3.9.12 (with Anaconda 3)

bug
opened by kjhcav 3
Support yaml format of FOSSLight Report
Signed-off-by: Jiyeong Seok [email protected]

Description

Support yaml format of FOSSLight Report

Type of change

Please insert 'x' one of the type of change.

[ ] Bug fix (non-breaking change which fixes an issue)

[x] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[ ] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

enhancement
opened by dd-jy 2
Fix bug about dep. arg input when not dep. running
Description

Fix bug about dep. arg input when not dep. running

Add importlib-metadata to requirement-dev.txt with specific version as a dependency for test on Python-3.7

Type of change

Please insert 'x' one of the type of change.

[x] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[ ] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

bug
opened by bjk7119 1
Modify help msg if invalid input
Description

Modify help msg if invalid input

Type of change

Please insert 'x' one of the type of change.

[ ] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[x] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

chore
opened by bjk7119 1
Change the required version of Python to 3.7
Description

Change the minimum required version of Python to 3.7.

Reason :

From ScanCode v31.0.1, Python 3.7+ is required. For this reason, the FOSSLight source scanner requires python 3.7.

Type of change

Please insert 'x' one of the type of change.

[ ] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[x] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

chore
opened by soimkim 1
Change FL Reuse to FL Prechecker
Description

Change FL Reuse to FL Prechecker

Type of change

Please insert 'x' one of the type of change.

[x] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[ ] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

bug fix
opened by bjk7119 1
Print message when comparison rows are over 100.
Signed-off-by: Jiyeong Seok [email protected]

Description

Print message when comparison rows are over 100.

Add progress bar

Type of change

Please insert 'x' one of the type of change.

[ ] Bug fix (non-breaking change which fixes an issue)

[x] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[ ] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

chore
opened by dd-jy 1
Fix errors when parsing with path
Description

Fix the bug caused by not initializing the variable that outputs the default OSS Name.

Type of change

Please insert 'x' one of the type of change.

[x] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[ ] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

bug fix
opened by soimkim 1
Add a FOSSLight Binary
Description

Add the FOSSLight Binary to run during analysis.

Add the v option to print the version.

Type of change

Please insert 'x' one of the type of change.

[ ] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[x] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

enhancement
opened by soimkim 1
Add the -f option and change way to create output
Description

Add the -f option to input the output file format.

Change it to use FL Util's functions when generating output.

Input Mode

AS-IS: If user just type enter, it asks user to re-enter (try 2 times). Source and dependency path to be analyzed are inputted respectively.

TO-BE: If user just type enter in the input mode, it is assumed that nothing has been inputted. Source and dependency path to be analyzed is input at once.

Type of change

Please insert 'x' one of the type of change.

[ ] Bug fix (non-breaking change which fixes an issue)

[ ] New feature (non-breaking change which adds functionality)

[ ] Documentation update

[x] Refactoring, Maintenance

[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

chore
opened by soimkim 1
An error occurs when FOSSLight Util is 1.2.0

Describe the bug An error occurs when FL Util is 1.2.0.

Expected behavior Specify the minimum version of FOSSLight Util required by FOSSLight Scanner.
bug

opened by soimkim 1

Releases(v1.7.8)

v1.7.8(Jan 2, 2023)
Changes

🔧 Maintenance

Update version of package for actions @bjk7119 (#54)

Source code(tar.gz)
Source code(zip)
v1.7.7(Nov 18, 2022)
Changes

🔧 Maintenance

Fix the output file msg if nothing scanned @dd-jy (#52)

Source code(tar.gz)
Source code(zip)
v1.7.6(Nov 4, 2022)
Changes

🐛 Hotfixes

Fix bug about dep. arg input when not dep. running @bjk7119 (#50)

🔧 Maintenance

Analyze current path if not input path @bjk7119 (#51)

Source code(tar.gz)
Source code(zip)
v1.7.5(Oct 6, 2022)
Changes

🔧 Maintenance

Fix the binary text copy issue @dd-jy (#49)

Source code(tar.gz)
Source code(zip)
v1.7.4(Sep 15, 2022)
Changes

🔧 Maintenance

Change the report file name @dd-jy (#48)

Modify help msg if invalid input @bjk7119 (#47)

Source code(tar.gz)
Source code(zip)
v1.7.3(Sep 1, 2022)
Changes

🚀 Features

Support 'xlsx' report for Compare mode @dd-jy (#46)

🔧 Maintenance

Change the required version of Python to 3.7 @soimkim (#45)

Source code(tar.gz)
Source code(zip)
v1.7.2(Aug 16, 2022)
Changes

🚀 Features

Support yaml format of FOSSLight Report @dd-jy (#42)

Source code(tar.gz)
Source code(zip)
v1.7.1(Jul 22, 2022)
Changes

🐛 Hotfixes

Change FL Reuse to FL Prechecker @bjk7119 (#43)

Source code(tar.gz)
Source code(zip)
v1.7.0(Jul 22, 2022)
Changes

🚀 Features

Add compare mode @dd-jy (#38)

🔧 Maintenance

Replace 'y' option to 'p' option. @dd-jy (#41)

Fix scanner support format and not to create csv. @dd-jy (#40)

Print message when comparison rows are over 100. @dd-jy (#39)

Source code(tar.gz)
Source code(zip)
v1.6.15(Jul 6, 2022)
Changes

🐛 Hotfixes

Modify reuse input parameter @bjk7119 (#37)

Source code(tar.gz)
Source code(zip)
v1.6.14(May 19, 2022)
Changes

🚀 Features

Run fosslight_source without installing it @soimkim (#34)

Add a Dockerfile @soimkim (#35)

🐛 Hotfixes

Fix a bug where part of the output file is not created without the -o option @soimkim (#36)

Source code(tar.gz)
Source code(zip)
v1.6.13(Apr 11, 2022)
Changes

🐛 Hotfixes

Fix an errors when parsing with path @soimkim (#33)

Fix an error that occur when downloading link @soimkim (#30)

🔧 Maintenance

Add a commit message checker @soimkim (#31)

Source code(tar.gz)
Source code(zip)
v1.6.12(Mar 28, 2022)
🐛 Hotfixes

Fix a bug where column names do not match when overwriting an excel @soimkim (#29)

Source code(tar.gz)
Source code(zip)
v1.6.11(Mar 27, 2022)
🚀 Features

Print download location when analyzing as link @soimkim (#28)

Extract the OSS name from the link @soimkim (#27)

Source code(tar.gz)
Source code(zip)
v1.6.10(Mar 11, 2022)
Changes

🔧 Maintenance

Apply f-string format @bjk7119 (#26)

Source code(tar.gz)
Source code(zip)
v1.6.9(Feb 28, 2022)
Changes

🔧 Maintenance

Change the result generation method to merging @soimkim (#25)

Add an inputable value to mode @soimkim (#24)

Update the README with additional Scanners @soimkim (#23)

Source code(tar.gz)
Source code(zip)
v1.6.8(Feb 10, 2022)
Changes

🚀 Features

Change the options when analyzing the source @soimkim (#19)

Support analysis mode @soimkim (#17)

Add a FOSSLight Reuse @soimkim (#16)

Add a FOSSLight Binary @soimkim (#14)

🐛 Hotfixes

Fix the bug that the raw folder is not deleted when analyzing with a link @soimkim (#21)

🔧 Maintenance

Modify to print output file name @bjk7119 (#22)

Create a result file of FOSSLight Source @soimkim (#20)

Move the binary analysis result file to output @soimkim (#18)

Source code(tar.gz)
Source code(zip)
v1.6.7(Nov 25, 2021)
Changes

🔧 Maintenance

Print output file instead of path @soimkim (#13)

Source code(tar.gz)
Source code(zip)
v1.6.6(Nov 4, 2021)
Changes

🚀 Features

Add number of process to analyze as parameter @soimkim (#11)

Source code(tar.gz)
Source code(zip)
v1.6.5(Oct 21, 2021)
Changes

🔧 Maintenance

Add the -f option and change way to create output @soimkim (#10)

Change the parameters related to the scanner path @soimkim (#9)

Source code(tar.gz)
Source code(zip)
v1.6.4(Oct 7, 2021)
Changes

🔧 Maintenance

Change sheet name of Dependency Scan result @soimkim (#8)

Source code(tar.gz)
Source code(zip)
v1.6.3(Oct 6, 2021)
Changes

🚀 Features

Add option -t for hiding the progress bar @soimkim (#7)

Source code(tar.gz)
Source code(zip)
v1.6.2(Oct 5, 2021)
Changes

🔧 Maintenance

Specify the output file name @soimkim (#6)

Source code(tar.gz)
Source code(zip)
v1.6.1(Oct 1, 2021)
Changes

🐛 Hotfixes

Add the FOSSLight Util minimum version @soimkim (#4)

🔧 Maintenance

Change the output path of log, source @soimkim (#5)

Source code(tar.gz)
Source code(zip)
v1.6.0(Sep 24, 2021)
Changes

🔧 Maintenance

Change the version related files @soimkim (#2)

Add copyright, license for Reuse compliance @soimkim (#1)

Source code(tar.gz)
Source code(zip)

Owner

FOSSLight

GitHub Repository

Automated tool to find & created Exploit Poc for Clickjacking Vulnerability

ClickJackPoc This tool will help you automate finding Clickjacking Vulnerability by just passing a file containing list of Targets . Once the Target i

24 Dec 19, 2022

𝙾𝚙𝚎𝚗 𝚂𝚘𝚞𝚛𝚌𝚎 𝚂𝚌𝚛𝚒𝚙𝚝 - 𝙽𝚘 𝙲𝚘𝚙𝚢𝚛𝚒𝚐𝚑𝚝 - 𝚃𝚎𝚊𝚖 𝚆𝚘𝚛𝚔 - 𝚂𝚒𝚖𝚙𝚕𝚎 𝙿𝚢𝚝𝚑𝚘𝚗 𝙿𝚛𝚘𝚓𝚎𝚌𝚝 - 𝙲𝚛𝚎𝚊𝚝𝚎𝚍 𝙱𝚢 : 𝙰𝚕𝚕 𝚃𝚎𝚊𝚖 - 𝙲𝚘𝚙𝚢𝙿𝚊𝚜𝚝 𝙲𝚊𝚗 𝙽𝚘𝚝 𝙼𝚊𝚔𝚎 𝚈𝚘𝚞 𝚁𝚎𝚊𝚕 𝙿𝚛𝚘𝚐𝚛𝚊𝚖𝚖𝚎𝚛

𝙾𝚙𝚎𝚗 𝚂𝚘𝚞𝚛𝚌𝚎 𝚂𝚌𝚛𝚒𝚙𝚝 - 𝙽𝚘 𝙲𝚘𝚙𝚢𝚛𝚒𝚐𝚑𝚝 - 𝚃𝚎𝚊𝚖 𝚆𝚘𝚛𝚔 - 𝚂𝚒𝚖𝚙𝚕𝚎 𝙿𝚢𝚝𝚑𝚘𝚗 𝙿𝚛𝚘𝚓𝚎𝚌𝚝 - 𝙲𝚛𝚎𝚊𝚝𝚎𝚍 𝙱𝚢 : 𝙰𝚕𝚕 𝚃𝚎𝚊𝚖 - 𝙲𝚘𝚙𝚢𝙿𝚊𝚜𝚝 𝙲𝚊𝚗 𝙽𝚘𝚝 𝙼𝚊𝚔𝚎 𝚈𝚘𝚞 𝚁𝚎𝚊𝚕 𝙿𝚛𝚘𝚐𝚛𝚊𝚖𝚖𝚎𝚛

2 Oct 27, 2022

Learning to compose soft prompts for compositional zero-shot learning.

Compositional Soft Prompting (CSP) Compositional soft prompting (CSP), a parameter-efficient learning technique to improve the zero-shot compositional

32 Jan 02, 2023

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

520_APK_HOOK 介绍将msf生成的payload，注入到一个正常的apk文件中，重新打包后进行加固，bypass手机安全管家的检测。项目地址: https://github.com/cleverbao/520apkhook 作者: BaoGuo 优点相比于原始的msf远控，此版本ap

368 Jan 02, 2023

Security offerings for AWS Control Tower

Caylent Security Catalyst Reference Architecture Examples This repository contains solutions for Caylent's Security Catalyst. The Security Catalyst is

1 Oct 22, 2021

Exploiting CVE-2021-44228 in vCenter for remote code execution and more

Log4jCenter Exploiting CVE-2021-44228 in vCenter for remote code execution and more. Blog post detailing exploitation linked below: COMING SOON Why? P

81 Dec 20, 2022

log4j-tools: CVE-2021-44228 poses a serious threat to a wide range of Java-based applications

log4j-tools Quick links Click to find: Inclusions of log4j2 in compiled code Calls to log4j2 in compiled code Calls to log4j2 in source code Overview

171 Dec 25, 2022

A compact version of EDI-Vetter, which uses the TLS output to quickly vet transit signals.

A compact version of EDI-Vetter, which uses the TLS output to quickly vet transit signals. All your favorite hits in a simplified format.

2 Aug 03, 2022

Extendable payload obfuscation and delivery framework

NSGenCS What Is? An extremely simple, yet extensible framework to evade AV with obfuscated payloads under Windows. Installation Requirements Currently

123 Dec 19, 2022

Chrome Post-Exploitation is a client-server Chrome exploit to remotely allow an attacker access to Chrome passwords, downloads, history, and more.

ChromePE [Linux/Windows] Chrome Post-Exploitation is a client-server Chrome exploit to remotely allow an attacker access to Chrome passwords, download

3 Oct 05, 2022

Workshop Material on VM-based Deobfuscation

Analysis of Virtualization-based Obfuscation This repository contains slides, samples and code of the 4h code deobfuscation workshop at r2con2021. We

133 Dec 18, 2022

Simple script to have LDAP authentication in Home Assistant Docker, using NGINX's ldap-auth container

Home Assistant LDAP Auth Simple script to have LDAP authentication in Home Assistant Docker, using NGINX's ldap-auth container. Usage Deploy NGINX's l

1 Sep 21, 2022

CloudFlare reconnaissance, tries to uncover the IP behind CF.

8 Dec 03, 2021

LdapRelayScan - Check for LDAP protections regarding the relay of NTLM authentication

LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections r

315 Dec 18, 2022

Laravel RCE (CVE-2021-3129)

CVE-2021-3129 - Laravel RCE About The script has been made for exploiting the Laravel RCE (CVE-2021-3129) vulnerability. This script allows you to wri

21 Dec 27, 2022

Signatures and IoCs from public Volexity blog posts.

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. They are organised by year, and within each year

130 Dec 29, 2022

Brute force attack tool for Azure AD Autologon/Seamless SSO

Brute force attack tool for Azure AD Autologon

89 Jan 02, 2023

A semi-automatic osint/recon framework.

Smog Framework A semi-automatic osint/recon framework. Requirements git Python = 3.8 How to use it

22 Oct 17, 2022

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF

118 Nov 07, 2022

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description This demo Tomcat 8 server has a vulnerable app deployed on it and is also vulne

60 Dec 10, 2022

FOSSLight Scanner performs open source analysis after downloading the source by passing a link that can be cloned by wget or git.

Related tags

Overview

FOSSLight Scanner

Contents

📋 Prerequisite

🎉 How to install

🚀 How to run

Parameters

Ex 1. Local Source Analysis

Ex 2. Download Link and analyze

📁 Result

👏 How to report issue

📄 License

Comments

Description

Type of change

Description

Type of change

Description

Type of change

Description

Type of change

Description

Type of change

Description

Type of change

Description

Type of change

Description

Type of change

Description

Type of change

Releases(v1.7.8)

v1.7.8(Jan 2, 2023)

Changes

🔧 Maintenance

v1.7.7(Nov 18, 2022)

Changes

🔧 Maintenance

v1.7.6(Nov 4, 2022)

Changes

🐛 Hotfixes

🔧 Maintenance

v1.7.5(Oct 6, 2022)

Changes

🔧 Maintenance

v1.7.4(Sep 15, 2022)

Changes

🔧 Maintenance

v1.7.3(Sep 1, 2022)

Changes

🚀 Features

🔧 Maintenance

v1.7.2(Aug 16, 2022)

Changes

🚀 Features

v1.7.1(Jul 22, 2022)

Changes

🐛 Hotfixes

v1.7.0(Jul 22, 2022)

Changes

🚀 Features

🔧 Maintenance

v1.6.15(Jul 6, 2022)

Changes

🐛 Hotfixes

v1.6.14(May 19, 2022)

Changes

🚀 Features

🐛 Hotfixes

v1.6.13(Apr 11, 2022)

Changes

🐛 Hotfixes

🔧 Maintenance

v1.6.12(Mar 28, 2022)

🐛 Hotfixes

v1.6.11(Mar 27, 2022)

🚀 Features

v1.6.10(Mar 11, 2022)