Skip to content

Compliance and license scanning with SCANOSS🔗

SCANOSS is a code scanner powered by the Software Transparency Foundation and SCANOSS , enabling you to analyze generated code for open-source compliance and licensing. This helps to understand potential licensing implications when using generated code.

Important

This feature sends a hash of suggested code snippets to the SCANOSS service hosted by the Software Transparency Foundation for analysis. While the service is free to use, very high usage may trigger rate limiting.
Further, neither MVTec nor SCANOSS can guarantee that no license implications exist, even if no issues are detected during the scan.

To configure SCANOSS, open Settings > AI Assistants > SCANOSS Mode and select the desired mode:

  • Off: Disables SCANOSS completely
  • Manual: Allows you to trigger scans manually via the SCANOSS button on generated code via the Coder Agent or directly in the Chat view
  • Automatic: Automatically scans generated code snippets in the Chat view

Integrating SCANOSS for compliance scanning🔗

Coder integrates with SCANOSS to help you identify potential licensing implications in your AI-generated code. This allows you to scan code changes proposed by Coder for open-source compliance and licensing concerns before applying them to your codebase.

Manual scanning🔗

To manually scan a code snippet:

  1. Generate a code in the AI Chat view or via the Coder Agent.
  2. Click the SCANOSS button in the toolbar of the code renderer embedded in the Chat view or above the changeset.

  3. As a result one of the following icons will appear:

    • A warning icon if a match is found
    • A green check mark if no matches are found

  4. If a warning icon is displayed, click the SCANOSS button again to view detailed scan results in a popup window.

Automatic scanning🔗

In Automatic mode, SCANOSS scans code in the background whenever it is generated in the Chat View or with the Coder Agent. Results are displayed immediately, indicating whether any matches are found.

Understanding SCANOSS results🔗

After a scan is completed, SCANOSS provides a detailed summary, including

  • Match Percentage: Degree of similarity between the scanned snippet and the code in the database
  • Matched File: File or project containing the matched code
  • Licenses: List of licenses associated with the matched code, including links to detailed license terms