* explicitly only scan jar/zip/disabled files for attributions * add route to force scan file * prepare