Address feedback from reviews

Signed-off-by: Ayan Sinha Mahapatra <ayansmahapatra@gmail.com>

Author: AyanSinhaMahapatra

CHANGELOG.rst

@@ -16,6 +16,12 @@ v35.1.0 (unreleased)
   license rules used during the scan.
   https://github.com/aboutcode-org/scancode.io/issues/1657
 
+- Update scancode-toolkit to v32.4.0. See CHANGELOG for updates:
+  https://github.com/aboutcode-org/scancode-toolkit/releases/tag/v32.4.0
+  Adds a new ``git_sha1`` attribute to the ``CodebaseResource`` model as this
+  is now computed and returned from the ``scancode-toolkit`` ``--info`` plugin.
+  https://github.com/aboutcode-org/scancode.io/pull/1708
+
 v35.0.0 (2025-06-23)
 --------------------
 

scanpipe/models.py

@@ -2752,7 +2752,7 @@ class Type(models.TextChoices):
         _("SHA1_git"),
         max_length=40,
         blank=True,
-        help_text=_("SHA1 git checksum hex-encoded, as in git genreated checksum."),
+        help_text=_("git checksum, as in git generated SHA1 checksum, hex-encoded."),
     )
     package_data = models.JSONField(
         default=list,

scanpipe/pipes/scancode.py

@@ -767,7 +767,7 @@ def run_scan(location, output_file, run_scan_args):
     """Scan the `location` content and write the results into an `output_file`."""
     _success, results = scancode_run_scan(
         input=shlex.quote(location),
-        processes=get_max_workers(keep_available=2),
+        processes=get_max_workers(keep_available=1),
         quiet=True,
         verbose=False,
         return_results=True,