Test App - license detection nuget trivy parses *.nuspec files found inside $NUGET_PACKAGES folder or $HOME/.nuget/packages/ to fetch license information for a given package Filesystem Clone the repo Easy way to use dotnet is to install nix (https://nixos.org/download#download-nix) Run nix-shell -p dotnet-sdk_8 dotnetPackages.Nuget inside the cloned folder. Run dotnet restore. This will populate the .nuspec files in corresponding folder ($HOME/.nuget/packages) Run filesystem scan To install additional packages use dotnet add package <package-name> (https://www.nuget.org/packages) Image Run docker build -t <image-name> . Scan the image