FossID Documentation

Blind Audit Fingerprints Collection

Here is how you collect the fingerprints of the target source code:

  • Download and configure FossID CLI. See CLI Download section for more information.
  • Run the following command to collect the fingerprints and save the results in a .fossid file:

      $ fossid-cli --local --enable-sha1=1 SCAN_TARGET > FINGERPRINTS.fossid
    
  • A file called FINGERPRINTS (or whatever name you decided in the previous step) with extension .fossid is created in the same folder.

NOTE - Supported character encoding:

The fossid CLI expects the .fossid files to be stored in UTF-8 character encoding and may not work properly if other encoding is used. This is mainly encountered on systems using UTF-16, to address this you can either:

  • Convert the .fossid files from UTF-16 to UTF-8.
  • Change character encoding to UTF-8 of your system prior generating .fossid files.

An example of how to do the first option

  • Check character encoding for the .fossid file:

      $ file utf-16-le-example.fossid
      utf-16-le-example.fossid: Little-endian UTF-16 Unicode text, with very long lines, with CRLF line terminators
    
  • Convert the file to UTF-8 character encoding:

      $ iconv -f UTF-16LE -t UTF-8 utf-16-le-example.fossid > UTF-8-example.fossid
    

Your converted .fossid files can now be used as input for scanning.