fortify / fcli

fcli is a command-line utility for interacting with various Fortify products
https://fortify.github.io/fcli/
Other
32 stars 22 forks source link

`fcli fod release` add subcommand for retrieving OSS components #643

Open kadraman opened 2 weeks ago

kadraman commented 2 weeks ago

Enhancement Request

Now that the API endpoint GET /api/v3/applications/open-source-components now supports filtering by release we can add some useful commands for querying on OSS components. For example:

fcli fod release list-oss --release ...
fcli fod action run oss-components ...
fcli fod action run oss-license-check

The later could include filtering on vulnerable components, licenses used etc and maybe even failing build which is what customers have been asking for ... and have had to use full Debricked solution to do so.

There is still no support for filtering on Applications but we could "find" all releases for an application if necessary.