On the recordRead 9 Oct 202623 facts
ts-scan
Frankfurt am Main, Germany
On the record
- Analysis
- It analyzes native lockfiles and build configurations to identify dependencies without additional configuration.trustsource.io · read 9 Oct 2026
- API
- The product page says results can flow through a documented REST API to TrustSource or other tooling.trustsource.io · read 9 Oct 2026
- Backend
- Scan results can be sent through a documented REST API to the TrustSource platform or other tooling.trustsource.io · read 9 Oct 2026
- CI/CD integration
- The maker says ts-scan integrates into GitHub workflows as a GitHub Action.trustsource.io · read 9 Oct 2026
- CI integration
- The product page says ts-scan integrates with GitHub workflows through a GitHub Action.trustsource.io · read 9 Oct 2026
- Community support
- The documentation directs community users to file repository tickets and says TrustSource subscribers can contact TrustSource support.trustsource.github.io · read 9 Oct 2026
- Company
- TrustSource identifies itself as a brand of EACG GmbH.trustsource.io · read 9 Oct 2026
- Dependency analysis
- ts-scan analyzes native lockfiles and build configurations to find direct and transitive dependencies.trustsource.io · read 9 Oct 2026
- Dependency coverage
- The product page says ts-scan supports more than 20 build systems, including Maven, Gradle, npm, PyPI, NuGet, Composer, Go Modules, Cargo and CocoaPods.trustsource.io · read 9 Oct 2026
- Installation
- The maker documents installation with pip and says Docker images and source builds are available in the repository.trustsource.io · read 9 Oct 2026
- Intended users
- The maker describes ts-scan as an open-source CLI scanner for use in CI/CD pipelines to identify dependencies and create SBOMs.trustsource.io · read 9 Oct 2026
- License
- The repository identifies ts-scan as Python software under the Apache-2.0 license.github.com · read 9 Oct 2026
- Maker
- TrustSource is a brand of EACG GmbH; the site operator is EACG Operations Services GmbH, located in Frankfurt am Main, Germany.trustsource.io · read 9 Oct 2026
- Open source
- The scanner is open source and its GitHub repository identifies the license as Apache-2.0.github.com · read 9 Oct 2026
- Other CI integrations
- TrustSource says ts-scan integrates with GitHub Actions, GitLab CI and Jenkins.trustsource.io · read 9 Oct 2026
- Purpose
- ts-scan scans software dependencies and generates a software bill of materials (SBOM).trustsource.io · read 9 Oct 2026
- SBOM formats
- It exports SBOMs in SPDX and CycloneDX formats.trustsource.io · read 9 Oct 2026
- Security and policy checks
- Uploaded SBOMs can be checked on the TrustSource platform against vulnerability databases, license policies and regulatory requirements.trustsource.io · read 9 Oct 2026
