fortify / fcli

fcli is a command-line utility for interacting with various Fortify products
https://fortify.github.io/fcli/
Other
30 stars 16 forks source link

`fcli ssc appversion-artifact upload/import`: If applicable, check parser plugin installed & enabled before uploading #229

Open rsenden opened 1 year ago

rsenden commented 1 year ago

The fcli ssc appversion-artifact upload and import commands simply upload the given artifact with the given engine type to SSC, potentially resulting in processing failure if the appropriate parser plugin hasn't been installed/enabled. Before import/upload, fcli could potentially check whether the appropriate parser plugin has been installed and has been enabled. However:

This needs more research; potentially we need to submit an SSC enhancement request to allow access to an endpoint that allows for checking whether a particular engine type is available; on the SSC side, all users/token types that allow for uploading artifacts should automatically have the permission to call this endpoint.

rsenden commented 1 year ago

There is an /api/v1/engineTypes endpoint available to query available engine types; we'll just need to check whether most/all SSC roles and token types that allow for uploading artifacts also allow access to this endpoint.