POSTQ CODE SCANNER SOURCE INFORMATION

PostQ Code Scanner-Beta private invite-only evaluation release

PostQ Code Scanner contains PostQ proprietary components and may include third-party/open-source
components. PostQ does not generally provide source code for PostQ proprietary components.

The release-specific THIRD_PARTY_NOTICES.txt identifies whether a particular artifact includes a
component for which corresponding source, modification source, relinking material, or other source
information is required. The OCI container currently includes OpenGrep as a separate executable
under the GNU Lesser General Public License version 2.1. Native CLI and IDE packages use a separately
installed OpenGrep executable and do not include it in the reviewed distribution.

For a container release, the exact corresponding source and build/modification information must be
available at:

third-party/source-information/opengrep-1.27.1.txt in the legal bundle for each artifact that
includes OpenGrep.

Open-source compliance requests:

contact@postqsoftwarelabs.com

POSTQ SOFTWARE LABS PRIVATE LIMITED
Registered office: C 708 Sargam, Nanded City, Pune- 411068, Maharashtra, India
CIN: U62010PN2026PTC252785