FoD scan command refactoring - Githubissues

fortify / fcli

fcli is a command-line utility for interacting with various Fortify products

https://fortify.github.io/fcli/

Other

28 stars 16 forks source link

FoD scan command refactoring #446

Closed kadraman closed 9 months ago

kadraman commented 9 months ago

fix: FoD: FoD: Cannot find release for "XXX:YYY" in 2.0.0.develop (resolves #445)

fix: FoD: Decide on command structure for managing scans (resolves #435)

fix: FoD: Add command for downloading FPR (resolved #423)

Most scan related commands have been moved to be under xxx-scan entities, the the following exception:

the fod scan list command has been kept in case the user wants to list different types of scans, however individual fod xxx-scan list commands are available for each scan type.
fod assessment-type list has been kept as a top level command since it queries on both releases and scans and didn't fit naturally into either.
fod release download-results (renamed from download-fpr is kept as a generic download command for the release and will be able to download FPRs or SBOMs as relevant.
fod xxx-scan download is available for each entity and will download an FPR or SBOM as appropriate.

A new command fod oss-scan download has been added to download an SBOM, this command requires scanId but currently this is only available from the UI as Debricked scans are kicked off on the back of a SAST scan.

Full list of fcli fod commands is now:

fod-commands.csv

The current and future commands have been updated in teams here.