bes-dev-kit is a cli tool for generating metadata and assessment report for BeSLighthouse.
- Python 3.10
- pip
- Github personal access token
$ python3 -m pip install besecure-developer-toolkit
If you are running the command for the first time, you will be prompted to provide the complete path to your besecure-osspoi-datastore
and besecure-assessment-datastore
and your personal access token
Command helps to generate metadata such as OSSP-master file data and version details file.
$ bes-dev-kit generate metadata
For more options use --help
at end.
$ bes-dev-kit generate report <report name>
<report name> - scorecard, codeql, criticality_score
For more options use --help
at end.
Note: All three reports can be generated at once by passing all report names - $ bes-dev-kit generate report scorecard criticality_score codeql