Skip to main content

Package for using the Synopsys Black Duck Hub REST API.

Project description


The hub-rest-api-python provides Python bindings for Hub REST API.

:warning:Recently CVE-2020-27589, a medium severity security defect, was discovered in the blackduck PyPi library which affects versions 0.0.25 – 0.0.52 that could suppress certificate validation if the calling code used either the upload_scan or download_project_scans methods. These methods did not enforce certificate validation. Other methods in the library are not affected. The defect was fixed in version 0.0.53.

Customers using the blackduck library should upgrade to version 0.0.53, or later, to implement the fix.

New in 1.0.0

Introducing the new Client class.

In order to provide a more robust long-term connection, faster performance, and an overall better experience a new Client class has been designed.

It is backed by a Requests session object. The user specifies a base URL, timeout, retries, proxies, and TLS verification upon initialization and these attributes are persisted across all requests.

At the REST API level, the Client class provides a consistent way to discover and traverse public resources, uses a generator to fetch all items using pagination, and automatically renews the bearer token.

See Client versus HubInstance Comparison and also read the Client User Guide on the Hub REST API Python Wiki.

Important Note

The old HubInstance (in keeps its existing functionality for backwards compatibility and therefore does not currently leverage any of the new features in the Client class.

We believe that the new features are compelling enough to strongly encourage users to consider moving from HubInstance to Client. See Client versus HubInstance Comparison.

Please give it a try and let us know what you think!

To use

pip3 install blackduck
from blackduck import Client
import logging
import os

    format="[%(asctime)s] {%(module)s:%(lineno)d} %(levelname)s - %(message)s"

bd = Client(
    # verify=False  # TLS certificate verification

for project in bd.get_resource(name='projects'):


Example code showing how to work with the new Client can be found in the examples/client folder.


Using pytest

git clone
cd hub-rest-api-python
# optional but advisable: create/use virtualenv
# you should have 3.x+, e.g. Python 3.8.0+

pip3 install -r requirements.txt
pip3 install .
cd test

Install package locally

Do this when testing a new version.

git clone
cd hub-rest-api-python
pip3 install -r requirements.txt
pip3 install .

To uninstall:

pip3 uninstall blackduck

Where can I get the latest release?

This package is available on PyPi:

pip3 install blackduck


Documentation for hub-rest-api-python can be found on the base project: Hub REST API Python Wiki

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for blackduck, version 1.0.4
Filename, size File type Python version Upload date Hashes
Filename, size blackduck-1.0.4-py3-none-any.whl (39.2 kB) File type Wheel Python version py3 Upload date Hashes View
Filename, size blackduck-1.0.4.tar.gz (32.8 kB) File type Source Python version None Upload date Hashes View

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Huawei Huawei PSF Sponsor Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page