Hi Marc, Yes, Fossology will open all compressed files (zip, tgz, jar, etc.) and scan the contents. This is done recursively, so that a jar in a zip is also opened and its contents scanned.

Hello again, I came to the conclusion that, - from an SPDX point of view, the packages is what I need to describe the embedded components and dependencies included in the scanned project - The SPDX ex

Dear All, I am having a hard using Fossology to fulfil my needs efficiently. I would like to share one of the core aspect I am struggling with, and would love to see if some of you are facing the same

Hi Geoffrey, Did you try to scan a smaller file ? I have just tested the basic Docker command you mentionned, and uploaded 326KB tgz archive, and the scan went fine. I have exactly the same header as