[FEATURE] Allow saving the Nexus IQ report JSON to file

[instinet-lewis-boon]

• What are you trying to do?

The scan-gradle-plugin allows us save the Nexus IQ scan results to a file with the property resultFilePath.

It would be great if this plugin could also dump the results to a file.

• What feature or behavior is this required for?

Once we have the file we can programmatically reference the results. For example, we can get the report URL and store it with other evidence. Ultimately, we would like to get the CycloneDX SBOM and store it with our artifacts.

• How could we solve this issue? (Not knowing is okay!)

This code in the scan-gradle-plugin passes in the jsonResultsFile. It looks like the nexus-platform-api has built in support for saving the report to a file.

• Anything else?

cc @bhamail / @DarthHater / @allenhsieh / @ken-duck

[duraki]

Whats wrong with alternative output formats?

[instinet-lewis-boon]

The --json and --xml flags are only available on the ossi subcommand. We only use the iq subcommand. Ideally, the output would be consistent across auditjs, scan-gradle-plugin, nancy, etc.