LicenseFinder Integration Guide

Integrate LicenseFinder with Vulnetix. Run LicenseFinder against your project to detect dependency licences, export as JSON or CSV, and upload to Vulnetix for licence risk tracking.

Install & scan

$ gem install license_finder

# Or add to Gemfile (recommended for projects)
bundle add license_finder --dev
$ license_finder report --format json > license-report.json

Run LicenseFinder in CI

Scan on every push and upload the results to Vulnetix:

- name: Install LicenseFinder
  run: gem install license_finder

- name: Install project dependencies
  run: npm install   # or bundle install / pip install -r requirements.txt

- name: Run LicenseFinder
  run: license_finder report --format json > license-report.json

- name: Upload to Vulnetix
  run: vulnetix upload --file license-report.json

Centralise LicenseFinder results in Vulnetix

Upload LicenseFinder JSON, CSV, HTML, Text output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

LicenseFinder documentation ↗  ·  Source repository ↗

Wire LicenseFinder into your CI/CD pipeline →