License FAQ

What is postq.lic?

It is your signed offline license file for PostQ Code Scanner. Keep the issued file unchanged; editing it prevents license validation.

How long is the beta trial?

The signed dates define when you may first activate the license. The 15-day trial starts on first successful activation inside that UTC window. It ends on the earlier of the fifteenth UTC day, the signed window end, or the beta availability end of 30 September 2026 UTC.

What are the default trial limits?

The current default is 20 unique repositories and 1,000 eligible source files per repository. The signed claims in the issued license are authoritative.

Does activation require internet access?

No. Signature, date, product, limit, and usage-ledger checks are local. License validation does not send source, findings, repository identity, or usage data to PostQ.

Where should I store the license?

Use an approved secret/configuration directory readable only by the scan account. In CI, use a protected file secret. In containers, mount the file read-only at a secrets path. Never bake it into an image or commit it to a repository.

What does the local ledger contain?

It tracks first activation time, hashed repository identity, and latest observed time needed for offline duration, limit, and rollback checks. It does not place source, findings, customer identity, repository paths, signatures, or license content in scanner reports.

What is the difference between a key mismatch and an invalid signature?

LICENSE_KEY_MISMATCH means the license does not match the installed scanner build. Contact PostQ support to confirm the correct build and license. LICENSE_SIGNATURE_INVALID means validation failed, commonly because the license file was modified or corrupted. Restore the original issued file and check status again.

Can I delete or edit the ledger?

Do not delete, edit, copy backward, or reset it. Treat it as protected product state. Tampering or clock rollback can prevent scanning and may conflict with the applicable terms.

Can I use one license in CLI, VS Code, Eclipse, and containers?

All scanning interfaces accept the PostQ license file. The permitted users, machines, environments, and distribution are determined by your issued license and agreement.

Does the Report Viewer consume a license?

No. Viewing completed reports does not require scanner activation.

What happens after expiration?

Scans that require the expired license fail with exit code 3. Existing reports remain readable. Contact the approved PostQ commercial/support channel for any extension or replacement entitlement; do not change dates in the file.

Why do I see a clock rollback error?

The local system time is earlier than the ledger's last observed UTC time beyond the allowed tolerance. Correct the host clock and time synchronization. Do not roll back or replace the ledger.

What information is safe to include in a support request?

Include the stable error identifier, product version, operating system, current UTC time, selected license path with sensitive directories redacted, and --license-status output. Do not include the license file, signature, source code, or ledger unless an approved secure support process explicitly requests it.