Adds --format parameter to ash/ash-multi scripts to enable additional output integrations, beginning with ASHARP (Automated Security Helper Aggregated Report Parser) as the intermediary data model to enable subsequent conversion from there.
Adds automated_security_helper Python code as a module of the same name from within new src directory, including poetry.lock and pyproject.toml files to support. This module includes the asharp script (CLI tool) that enabled programmatic parsing of the aggregated_results content in conjunction with the JSON output changes.
Adds pre-stage build of automated_security_helper module to Dockerfile
Adds support to handle when --format is a value other than the current default of text so scanners switch output to programmatically parseable output formats and asharp is called to parse the aggregated_results.txt file into aggregated_results.txt.json.
Moved source of version string truth into pyproject.toml for all projects, removed __version__ file to coincide with this.
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
$ cat ash_stdout.txt
Resolved OCI_RUNNER to: /usr/bin/docker
Building image automated-security-helper:local -- this may take a few minutes during the first build...
Running ASH scan using built image...
Issue #, if available: #50
Description of changes:
--format
parameter toash
/ash-multi
scripts to enable additional output integrations, beginning with ASHARP (Automated Security Helper Aggregated Report Parser) as the intermediary data model to enable subsequent conversion from there.automated_security_helper
Python code as a module of the same name from within newsrc
directory, including poetry.lock and pyproject.toml files to support. This module includes theasharp
script (CLI tool) that enabled programmatic parsing of the aggregated_results content in conjunction with the JSON output changes.automated_security_helper
module to Dockerfile--format
is a value other than the current default oftext
so scanners switch output to programmatically parseable output formats andasharp
is called to parse theaggregated_results.txt
file intoaggregated_results.txt.json
.pyproject.toml
for all projects, removed__version__
file to coincide with this.By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.