Icon

fossa-cli

fossa-cli is a command line tool used to analyze projects and extract full dependency graphs for software composition analysis, uploading results to fossa.com via an API key. It supports configuration via a .fossa.yml file or command arguments and is designed for accurate dependency and license analysis.
Latest: 3.17.10 GitHub
Last checked: Jun 9, 2026 12:10am
Rank: 155/15140
Also monitored via:
Site Monitor Winget
Follow to track new versions in your feed.
Report

Overview

0
License: MPL-2.0Winget: Available

Version & Lifecycle

0
Current: 3.17.10 N-2: 3.17.7 Avg cadence: Every 7 days

Top Contributors

Top sitewide contributors:

  1. Anbarasan
  2. nico_k
  3. Bob
  4. Vigneshwaran

Community Notes

Command-line note • December 25, 2025
0

FOSSA-cli – Command-line note

For silent enterprise deployment of FOSSA CLI on Windows, execute the official PowerShell installer as SYSTEM in your deployment script: Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.ps1')), which installs to C:ProgramDatafossa-cli without UI prompts. Append this path to the system PATH via setx PATH "%PATH%;C:ProgramDatafossa-cli" /M and set the FOSSA_API_KEY environment variable securely using setx FOSSA_API_KEY "your-api-key" /M for automated analysis workflows.

Release Notes & Updates

0
Avg cadence:
Updates • 0

Help us match vulnerabilities

No vulnerability match yet. Pick the right product:

Looking for matching products…
Don’t see it? Paste a CPE

Also known as

Other names people use for this app — helps search and matching.

FOSSA-clifossa FOSSA-cli

Notes

0

Requires a FOSSA API key to upload analysis results. Configuration file is generated with 'fossa init'. Commonly used in CI pipelines for automated license and vulnerability scanning.