WEBVTT

00:00.000 --> 00:04.440
In this part, I would like to make a short demonstration of Phosology.

00:05.120 --> 00:08.620
So, Phosology is a web-based tool licensed under GPL version 2

00:08.620 --> 00:12.820
license, so free software and open source, that allows you to scan for

00:12.820 --> 00:18.200
copyrights and licenses information within your source files.

00:18.800 --> 00:25.520
It detects the licensing information automatically from the strings in

00:25.520 --> 00:30.800
the source code and then allows you to review and curate the results

00:30.800 --> 00:31.360
manually.

00:31.840 --> 00:37.200
In the end, it exports the SPDX information in the industry standard

00:37.200 --> 00:42.360
for all the files in the scanned source files.

00:42.880 --> 00:46.360
So, let's have a look how the Phosology interface looks like.

00:46.860 --> 00:55.380
So, here you can see that it is hosted on my local computer, which is

00:55.380 --> 00:59.000
by the means of Docker Compose.

01:01.700 --> 01:10.100
After I log in, I get in the uploads and I upload new source files.

01:10.560 --> 01:17.500
So, this contains the source code for the busy box, that serves as an

01:17.500 --> 01:19.820
example for this demonstration.

01:19.820 --> 01:32.580
I select a few license scanning algorithms or tools and upload the new

01:32.580 --> 01:32.980
file.

01:33.620 --> 01:38.600
After clicking on my new upload, I see that the scan has started.

01:39.020 --> 01:45.740
After a few moments, this will finish and the scan is completed.

01:45.740 --> 01:52.620
Now, we can go to the browse part and select the busy box and see the

01:52.620 --> 01:53.100
results.

01:53.860 --> 01:58.360
So, on the right-hand side, you can see a number of licenses that have

01:58.360 --> 02:03.720
been found and on the left-hand side, you can see the directories

02:03.720 --> 02:05.140
within the project.

02:05.560 --> 02:07.300
So, let's have a look to core utils.

02:07.820 --> 02:11.980
Here you can see each individual file together with the license.

02:11.980 --> 02:18.940
And for instance, the od.c has two different licenses found, but one

02:18.940 --> 02:22.640
of them is detected twice.

02:22.900 --> 02:28.780
So, we can see that in the top, there is a GPL version 2 license and

02:28.780 --> 02:35.260
in the bottom is the copyright and licensing information for BSD.

02:35.260 --> 02:41.780
We curate the results manually, so remove one detection of the BSD

02:41.780 --> 02:45.200
license and select the GPL as default.

02:45.760 --> 02:55.440
After that, we can select a new action and make the Fossology export

02:55.440 --> 03:03.640
the results into the SPDX file for sharing with other partners.

03:04.520 --> 03:09.580
And with that, I would like to thank you for your attention.