Things I’ve made trying to put my dent in the universe.
I’ve worked on lots of little projects over the years. These are the most applicable to my current role at Black Duck Software. These are all open-source, public projects that are dynamically pulled from GitHub using their API. If you see something that piques your interest, check out the code and contribute if you have ideas for how it can be improved.
Component_Licenses_and_Terms_colt
A Node.js application that interacts with a Black Duck server and provides a GUI for searching licenses and terms
View on GitHubhttps://github.com/snps-steve/Component_Licenses_and_Terms_coltLanguage: HTML
Age: 0 years, 1 months
Enumerate-CVSS
This script enumerates and analyze CVSS scores from Black Duck data. The script fetches information about vulnerable components in a specified project and version from the Black Duck Server's APIs and outputs relevant details.
License_and_License_Terms
Retrieves Black Duck license data and associated license terms and allows exporting results to either JSON or CSV format.
View on GitHubhttps://github.com/snps-steve/License_and_License_TermsLanguage: Python
Age: 0 years, 1 months
Offline-Image-Creator
A tool to help with air gapped implementations of Black Duck (the script obtains and creates an archive for all of the Docker Container Images)..
View on GitHubhttps://github.com/snps-steve/Offline-Image-CreatorLanguage: Python
Age: 0 years, 1 months
Top-Black-Duck-Issues
Checks to see if vulnerable components are in the project's BOM in Black Duck and if so, do they match the TOP 25 CWEs or OWAPSP TOP 10 lists.
View on GitHubhttps://github.com/snps-steve/Top-Black-Duck-IssuesLanguage: Python
Age: 0 years, 0 months
Update-BD
This script is meant to be run as a daily cron job; it checks the Hub repo for new versions. If a new version is available, it replaces the old version with the new version.
