This is script to generate reports through Mend API v3.0
Project description
Mend Report Generation tool
This is script to generate reports through Mend API v3.0.
How To Use
$ mend-reporting-tool -h
usage: mend-reporting-tool [-h] -mendAPI MENDAPI -orgUUID ORGUUID -userEmail USEREMAIL -userKey USERKEY -projectUUID PROJECTUUID
[-reportType REPORTTYPE] [-format FORMAT] [-unzip UNZIP]
This is script to generate reports through Mend API v3.0.
options:
-h, --help show this help message and exit
-mendAPI MENDAPI Mend API v3.0 server hostname without https://, like `api-saas.whitesourcesoftware.com`
-orgUUID ORGUUID Organization UUID
-userEmail USEREMAIL User Email
-userKey USERKEY User Key
-projectUUID PROJECTUUID
List of Project UUIDs separeted by ','
-reportType REPORTTYPE
Report Type, for example: `vulnerabilities`, `sbom`, `spdx`, `spdx_2_3`, `cycloneDX`, `cycloneDX_1_5`,
`cycloneDX_1_6`. The `vulnerabilities` report type generates vulnerability report. The `sbom` report type generates
`spdx` format. Optional, default: `sbom`
-format FORMAT Report Format, acceptable formats for `vulnerabilities` reportType: `json`, `excel`; for `sbom` reportType: `json`,
`yaml`. Optional, default: `json`
-unzip UNZIP Extract report to the 'mend-reports' folder. Variants: yes, no. Optional, default: `no`
### Example:
mend-reporting-tool -mendAPI $MEND_API -orgUUID $MEND_ORGANIZATION_UUID -userEmail $MEND_EMAIL -userKey $MEND_USER_KEY -projectUUID $PROJECT_UUID -reportType sbom -format yaml -unzip yes
### Processing Project UUID: <Project_UUID>
>>> The report saved to 'report-<Project_UUID>.zip' successfully.
>>> The report 'report-<Project_UUID>.zip' extracted to 'mend-reports' folder.
>>> Deleted: report-<Project_UUID>.zip
>>> Report is ready in `mend-reports` folder.
...
# Content of `mend-reports` folder:
$ ls -l mend-reports/
-rw-r--r-- 1 alex alex 1033049 Apr 20 23:50 '<Project_Name>-project-SPDX-reportyaml'
How To Install
pip install 'mend-reporting-tool==0.1.0'
How To Install from source code
git clone https://github.com/chelyshev/mend-reporting-tool.git
python3 -m venv .venv
source .venv/bin/activate
pip install -e .
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
File details
Details for the file mend_reporting_tool-0.2.0.tar.gz.
File metadata
- Download URL: mend_reporting_tool-0.2.0.tar.gz
- Upload date:
- Size: 3.9 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
1302a84681174e1bc82aaf47f51c2c86ddffd5cbe94382ac1c3a09b5147214e7
|
|
| MD5 |
0054a7feb3e82cfdcf0a8fc777c171c5
|
|
| BLAKE2b-256 |
478237105f25294b54f442ea847bea20b55e5c6079bde67835295a477c73dc33
|
Provenance
The following attestation bundles were made for mend_reporting_tool-0.2.0.tar.gz:
Publisher:
python-publish.yml on chelyshev/mend-reporting-tool
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
mend_reporting_tool-0.2.0.tar.gz -
Subject digest:
1302a84681174e1bc82aaf47f51c2c86ddffd5cbe94382ac1c3a09b5147214e7 - Sigstore transparency entry: 1359011937
- Sigstore integration time:
-
Permalink:
chelyshev/mend-reporting-tool@15f199030667ec6dc5f2026e5dd8d47838894fa7 -
Branch / Tag:
refs/tags/0.2.0 - Owner: https://github.com/chelyshev
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
python-publish.yml@15f199030667ec6dc5f2026e5dd8d47838894fa7 -
Trigger Event:
release
-
Statement type: