Snippet matching can help you manage legal risk and detect possible license infringements. A snippet match occurs when a portion of code in your source file matches code in one or more KnowledgeBase files.
Snippets are small reusable pieces of computer code. A snippet of open-source software can easily find its way into your proprietary files. For example, a developer might find a useful function from an open-source program and copy and paste that code into their program.
Because the use of open-source software is managed through licenses that allow you to use, modify, and share the software under defined terms and conditions, it is important to identify the open-source software used in your proprietary code so that you can manage the legal risk and detect possible license infringement.
Your proprietary code might include only a portion of open-source software, but you still must comply with the license associated with that particular open-source software.
Conditions for running snippet analysis
These conditions apply to running snippet analysis:
- You must be running Code Sight within VS Code.
- You must be connected to a Black Duck SCA server whose version is 2024.10 or greater.
- The server must have a license for Generative AI Compliance.
To view the results of snippet analysis
- In LOCAL VIEW, make sure the scan mode is Automatic.
-
In
the LOCAL VIEW title bar, click the settings icon.
This displays the Code Sight Automatic Scan Configuration tab.
-
On the configuration tab, click to turn on the License Analysis
toggle.
- Use the two check boxes to choose when you want VS Code to scan the source files.
When it has scanned the source, VS Code displays the names of detected open-source snippets in the LOCAL VIEW.