Skip to main content

BDBOMDIFF

Blackduck BOM Diff to excel for AOSD import

Description

This is intended for finding new OSS component to be imported into AOSD

Getting Started

Dependencies

  • Blackduck
  • importlib-resources
  • openpyxl

Installing

  • pip install bdbomdiff

Executing program

  • How to run the program
<!-- on the folder it is running place this blackduck config file for blackduck library-->
.restconfig.json
{
    <!-- make sure Blackduck_url should not end with slash -->
  "baseurl": "Blackduck_url",
  "api_token": "API_KEY",
  "insecure": true,
  "debug": false
}

bdbomdiff PROJECT_NAME NEW_VERSION OLD_VERSION -o OUTPUT_DIR

Help

Any advise for common problems or issues.

>bdbomdiff -h
usage: Retreive BOM component info for the given project and version [-h] -o O [-l LIMIT | -u | -r] [-v] [-c] project_name version oldversion

positional arguments:
  project_name
  version
  oldversion

options:
  -h, --help            show this help message and exit
  -o O                  Output directory
  -l LIMIT, --limit LIMIT
                        Set limit on number of components to retrieve
  -u, --unreviewed
  -r, --reviewed
  -v, --vulnerabilities
                        Get the vulnerability info for each of the components
  -c, --custom_fields   Get the custom field info for each of the components

Authors

Dinesh Ravi

Version History

  • 0.3.0
    • get license, homepage url, description, copyright and files info,
  • 0.2.0
    • Documentation update
  • 0.1.0
    • Initial Release

License

This project is licensed under the MIT License - see the MIT file for details

Acknowledgments

Metadata

Release files for bdbomdiff 0.3.6

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for bdbomdiff 0.3.6
File Size Uploaded Provenance Actions
bdbomdiff-0.3.6.tar.gz 48.3 kB Without provenance Details for bdbomdiff-0.3.6.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for bdbomdiff 0.3.6
File Interpreter ABI Platform Actions
bdbomdiff-0.3.6-py3-none-any.whl Python 3 none any Details for bdbomdiff-0.3.6-py3-none-any.whl

Total release size: 95.7 kB

Release files / bdbomdiff-0.3.6.tar.gz

Download URL bdbomdiff-0.3.6.tar.gz
Size 48.3 kB
Tags Source
SHA-256 checksum
How to use checksums
4f680a53af16098569137cc87625f04187d69ad4c1fb99f32014c0025d931efc
BLAKE2b-256 checksum
How to use checksums
ad96009a070cbeb5b1ce745d9a905b7e1acad24d5399faba1804d5274b13dd05
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via poetry/1.1.14 CPython/3.10.7 Windows/10

Release files / bdbomdiff-0.3.6-py3-none-any.whl

Download URL bdbomdiff-0.3.6-py3-none-any.whl
Size 47.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
665ac638e87dd8642da16e7e293a7dbc1edc639e6ad3104f7d18631fcee170c7
BLAKE2b-256 checksum
How to use checksums
940240762eed9851b35aff449807647d47df75740bb42ba4ee8711e6c37d0f2e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via poetry/1.1.14 CPython/3.10.7 Windows/10

Security for bdbomdiff 0.3.6

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page