scantechstackvulns 1.0.1

No project description provided

Get Technology Stack Vulnerabilities

This package is useful for fetching known vulnerabilities of third party components used in projects from NVD site.

Getting Started

Using get-techstack-vulnerabilities takes almost no time! Simply install via the pip command:

pip install scantechstackvulns

From here you can import it into your source file by calling:

from scantechstackvulns import TechStack

How it works

It takes list of thirdparty components with versions as a input and generates an excel file of known vulnerabilities of that list of components.

Usage

The below is the way to use of this package

from scantechstackvulns import TechStack

technology_stack = [
    "postgresql 11.11",                     #|
    "spring framework vmware 4.3.25",       #| 
    "spring framework pivotal 4.3.25",      #|----- sample data
    "apache tomcat 9.0.58",                 #|
    "oracle jdk 1.8.0 update 252"           #|
]

output_file = "directory/file_name.xlsx"

TechStack.scan(techstack, output_file)

Note

• technology stack must contain exact version
• as of now only xlsx extension supports in output file
• here is the sample xlsx file to verify

License

This repository is licensed under the MIT license. See LICENSE for details.