docs: update license scanning support#2685
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates the documentation in docs/getting-started/supported-languages-and-tools.md to highlight the addition of license scanning as a supported feature. It also updates the language support table to clearly state the availability of license scanning for various package managers (such as Conan, NuGet, Pub, Go modules, Maven, npm, Composer, PyPI, Bundler, Cargo, and SwiftPM) instead of using dashes or specific tool scan details. There are no review comments, and I have no feedback to provide.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
Up to standards ✅🟢 Issues
|
07ca39f to
d950c1e
Compare
|
Overall readability score: 54.23 (🟢 +0)
View detailed metrics🟢 - Shows an increase in readability
Averages:
View metric targets
|
d950c1e to
1e2afb0
Compare
1e2afb0 to
e4cd318
Compare
There was a problem hiding this comment.
Pull Request Overview
Codacy analysis indicates that the PR is up to standards. The changes successfully implement the 'Available for [Ecosystem]' terminology across the supported languages table. However, cross-correlation with the Intent agent's acceptance criteria and the existing documentation structure reveals significant implementation gaps. By standardizing the entries, technical specificity has been lost for Java, JavaScript, and Python ecosystems. Most notably, the updates create internal inconsistencies by failing to mention Gradle and Yarn support which are listed in the 'Dependency Scanning' columns for the same languages. These regressions in documentation detail should be addressed to maintain the document's utility.
About this PR
- The standardization to 'Available for [Ecosystem]' has introduced technical gaps. Several languages (e.g., Java and JavaScript) support multiple package managers like Gradle and Yarn which are now omitted from the License Scanning column, despite being documented in the Dependency Scanning column. This creates a discrepancy that may confuse users regarding the actual scope of license scanning support.
TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback
e4cd318 to
b2fa52d
Compare
b2fa52d to
1a8fb3f
Compare
Summary
Updates the supported languages and tools page to document license scanning availability by ecosystem. The license scanning column now names the supported ecosystem directly, while the existing Trivy scan details remain in the dependency vulnerability and malicious packages detection columns.
Ecosystem to language mapping:
Validation
mkdocs build --strict