Do we have an example of how to integrate Scancode in CICD pipeline. My use case is that I have an allowed list of licenses that I have defined as license policy and pass it to scan code --license-policy. It adds a new tag as well. But I cannot figure out how to easily identify which files do not match my license policy and extract them from the output. The idea is to extract the files that have unapproved licenses, fail the build, submit the output json for violating files to a central logging solution like ElasticSearch. Not sure how to go about extracting the violating files details in a nice way and failing the build.
Do we have an example of how to integrate Scancode in CICD pipeline. My use case is that I have an allowed list of licenses that I have defined as license policy and pass it to scan code --license-policy. It adds a new tag as well. But I cannot figure out how to easily identify which files do not match my license policy and extract them from the output. The idea is to extract the files that have unapproved licenses, fail the build, submit the output json for violating files to a central logging solution like ElasticSearch. Not sure how to go about extracting the violating files details in a nice way and failing the build.