Base
Hardened build
minimal ports, security patches applied at build time
FOSSology on Ubuntu 24.04 LTS
Azure
Developer Tools
FOSSology, an open source license, copyright and export control compliance scanner with a web UI, ready to scan on first boot.
Overview
FOSSology is an open source license compliance toolkit and workflow system. You upload source packages and it runs its license, copyright and export control scanners over every file, then presents the findings in a web interface where reviewers clear licenses, record decisions and generate SPDX and compliance reports. It gives engineering and legal teams one place to run and record open source license compliance across their code.
It suits software teams, open source program offices and compliance reviewers who need to know exactly which licenses and copyrights are present in the code they ship, and to keep an auditable record of every clearing decision.
Why the cloudimg image
cloudimg ships FOSSology hardened, fully patched and preconfigured with a bundled PostgreSQL database and the scan scheduler already wired together, so the compliance workflow is ready to use, with all scan data and the file repository on a dedicated disk. FOSSology ships a well known default web login and database password, and this image destroys both: on the first boot of every instance a unique web administrator password and database secret are generated and written to a file only the root user can read, so no two deployments share a credential and none is baked in. The database stays bound to the loopback interface. It comes with a paired deployment guide and 24/7 cloudimg support.
Common uses
- Scanning source code for open source license obligations
- Reviewing and clearing license and copyright findings
- Generating SPDX and compliance reports for audits
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Developer Tools
Aa
Apache Archiva Repository Manager
Developer Tools
This image runs Apache Archiva, the open source build-artifact repository manager - a central, governed store for the bi...
Appsmith Open-Source Low-Code Platform
Developer Tools
This image runs Appsmith Community Edition, the open source low-code platform for building internal tools, admin panels,...
Beszel Server and Container Monitoring Hub
Developer Tools
This image runs Beszel, the open source, lightweight server and container monitoring hub - a clean web dashboard with hi...
changedetection.io - Website Change Monitor
Developer Tools
This image runs changedetection.io, the self-hosted service that monitors web pages for changes and notifies you when so...
Docker CE on Windows - Containerization Platform
Developer Tools
Docker Community Edition is the free, open source container runtime that allows you to package applications and their de...
Grafana OSS - Observability and Dashboarding
Developer Tools
This image runs Grafana OSS, the leading open source observability and dashboarding platform.