In this directory you can find examples for doing common tasks using the SDK.
Compares two asset versions to show Findings that were introduced or remediated, and which software components were added, updated, or removed.
How to create a new Product programatically.
If you want to run custom GraphQL queries using all the available fields in the API.
Shows how to download PDF and CSV reports for an asset version.
For programmatically downloading SBOMs for an asset version.
Creates a CSV report of high level information about products.
Getting all the Findings for an asset version, with filters by type, such as "CVE".
Querying for all the product and asset version using the SDK.
Gets the entire list of software components for an asset version, with filters by type, such as "OPERATING SYSTEM".
How to make custom queries using pagination and helper methods in the SDK.
How to use the search_sbom function of the SDK to search for components by name and version, and specify whether the search should be case-sensitive or not.
How to update Finding resolutions using the SDK, which allows you to set the status and specify justifications or vendor responses and provide comments.
How to programmatically upload test results (e.g. SBOMs or Third Party Scanners). Basically a one-liner you can add to your CI systems.
How to programmatically upload a binary image (e.g. a firmware or system image). Basically a one-liner you can add to your CI systems.
The following scripts provide various reporting capabilities for analyzing security data:
Compares different versions of each asset, focusing on vulnerability counts and risk scores. Useful for tracking security improvements or regressions across versions.
Analyzes and reports risk scores for different assets, helping identify high-risk assets that need attention.
Tracks and reports trends in vulnerability severity over time, helping identify patterns in security issues.
Reports on vulnerabilities per asset version over time, providing a historical view of security issues.
Tracks and reports on assets over time, including changes or updates to asset configurations.
Reports on uploads over time, including frequency and types of uploads, helping track asset version management.
For detailed information about each report, including setup instructions and usage examples, please see the Reports README.