Configuration | OSS Review Toolkit

📄️ Copyright Garbage

The copyright-garbage.yml file allows defining which Copyright statements are to be considered as garbage, like any invalid findings from a scanner.

The evaluator.rules.kts file allows you to define custom policy rules that automatically apply to review scan findings.

The reporter.how-to-fix-text-provider.kts file enables the injection of how-to-fix texts in Markdown format for ORT issues into the reports.

The license-classifications.yml file holds a user-defined categorization of licenses.

ORT does provide the license texts for all SPDX licenses and for all license references from ScanCode.

The items below can be configured by adding an .ort.yml file to the root of the source code repository.

A package configuration file allows you to define path excludes and license finding curations for a specific package (dependency) and provenance.

Curations correct invalid or missing package metadata and set the concluded license for packages.

AsciiDoc templates

Resolutions allow you to resolve issues, policy rule violations or vulnerabilities by providing a reason why they are acceptable and can be ignored.

Introduction