Add V2 report

1 files changed, 9 insertions, 0 deletions

diff --git a/README.md b/README.md
index e23b216..9511d1f 100644
--- a/README.md
+++ b/README.md
@@ -49,6 +49,15 @@ where:
 [test projects for security products](https://gitlab.com/gitlab-org/security-products/tests/) (e.g. `java-maven`)
 - `git_ref` is the Git ref to checkout and scan against (e.g. `master`)
 
+### Updating the SPDX index
+
+We will need to periodically update the SPDX index. This can be achieved with
+the following command.
+
+```bash
+$ wget --timestamping https://spdx.org/licenses/licenses.json
+```
+
 ## Supported languages and package managers
 
 The following table shows which languages and package managers are supported.