mend-images-vuln 2023.9.1

Get vulnerabilities from Images

Images Vulnerabilities

The tool creates a list of vulnerabilities per image in format CSV.

Supported Operating Systems

• Linux (Bash): CentOS, Debian, Ubuntu, RedHat
• Windows (PowerShell): 10, 2012, 2016

Prerequisites

• Python 3.9+
• Mend user with admin permissions

Installation

pip install mend-images-vuln

Note: Depending on whether the package was installed as a root user or not, you need to make sure the package installation location was added to the $PATH environment variable.

Usage

Using command-line arguments only:

images_vuln --user-key $WS_USERKEY --api-key $WS_APIKEY --url $WS_WSS_URL --email $WS_EMAIL --dir $OUTPUT_DIRECTORY

Using environment variables:

export WS_USERKEY=xxxxxxxxxxx
export WS_APIKEY=xxxxxxxxxxx
export WS_WSS_URL=https://saas.mend.io
export WS_EMAIL=[e-mail]

images_vuln --dir <Output folder>

Note: Either form is accepted. For the rest of the examples, the latter form would be used

Configuration Parameters

Note: Parameters can be specified as either command-line arguments, environment variables, or a combination of both.

Command-line arguments take precedence over environment variables.

CLI argument	Env. Variable	Type	Required	Description
‑‑help		switch	No	Show help and exit
‑‑version		switch	No	Show current version and exit
‑‑user-key	WS_USERKEY	string	Yes	Mend User Key
‑‑email	WS_EMAIL	string	Yes	Mend User Email
‑‑api-key	WS_APIKEY	string	Yes	Mend API Key
‑‑url	WS_WSS_URL	string	Yes	Mend Server URL
‑‑dir		string	No	Output directory for the CSV files (default: $PWD)
‑‑separate		boolean	No	If set to True, then a CSV file will be created for each repo. If set to False, then one consolidated CSV file will be made.(default: True)
‑‑proxy	HTTP_PROXY	string	No	Proxy host including port, with or without protocol prefix and optionally credentials. Expected formats:myproxy.host.com:1234,http://myproxy.host.com:1234,http://user:[e-mail]:1234
‑‑proxyUsername	HTTP_PROXY_USERNAME	string	No	Proxy username, if needed and if not included in the proxy host.
‑‑proxyPassword	HTTP_PROXY_PASSWORD	string	No	Proxy password, if needed and if not included in the proxy host.