Base
Hardened build
minimal ports, security patches applied at build time
FOSSology
Azure
Developer Tools
1 variation
FOSSology, an open source license, copyright and export control compliance scanner with a web UI, ready to scan on first boot.
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| FOSSology on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
FOSSology is an open source license compliance toolkit and workflow system. You upload source packages and it runs its license, copyright and export control scanners over every file, then presents the findings in a web interface where reviewers clear licenses, record decisions and generate SPDX and compliance reports. It gives engineering and legal teams one place to run and record open source license compliance across their code.
It suits software teams, open source program offices and compliance reviewers who need to know exactly which licenses and copyrights are present in the code they ship, and to keep an auditable record of every clearing decision.
Why the cloudimg image
cloudimg ships FOSSology hardened, fully patched and preconfigured with a bundled PostgreSQL database and the scan scheduler already wired together, so the compliance workflow is ready to use, with all scan data and the file repository on a dedicated disk. FOSSology ships a well known default web login and database password, and this image destroys both: on the first boot of every instance a unique web administrator password and database secret are generated and written to a file only the root user can read, so no two deployments share a credential and none is baked in. The database stays bound to the loopback interface. It comes with a paired deployment guide and 24/7 cloudimg support.
Common uses
- Scanning source code for open source license obligations
- Reviewing and clearing license and copyright findings
- Generating SPDX and compliance reports for audits
More in Developer Tools
Accent
Developer Tools
Accent, a developer oriented translation and localisation management platform, ready to hold your application's translat
Altair GraphQL Client
Developer Tools
a self hosted graphql ide, build, send and inspect graphql queries in your browser, ready the moment it boots.
Ansible Control Node
Developer Tools
a ready to use automation control host: playbooks, curated collections and inventory in place, with no credential baked
Aa
Apache Allura
Developer Tools
Apache Allura, the open source forge that runs SourceForge, giving your team hosted repositories, tickets, wikis and dis
Aa
Apache Archiva
Developer Tools
Apache Archiva, the build artifact repository manager, ready to serve and proxy artifacts on first boot.
Apache Camel Karavan
Developer Tools
A visual designer for building, running and managing Apache Camel integrations from a browser.