Script to output OSS components and licenses from latest scan in application sandboxes in Veracode platform

Uses Python3

Clone this repository:

git clone https://github.com/aszaryk/sandbox_oss_licenses

Install dependencies:

cd sandbox_oss_licenses
pip3 install -r requirements.txt

(Optional) Save Veracode API credentials in ~/.veracode/credentials

[default]
veracode_api_key_id = <YOUR_API_KEY_ID>
veracode_api_key_secret = <YOUR_API_KEY_SECRET>

Tested using Python3

usage: get_sandbox_oss_license_info.py applist.txt

NOTE:

--applist.txt is a REQUIRED text file containing application names used in parsing sandboxes.

--Application names should be exact

If you have saved credentials as above you can run:

python3 get_sandbox_oss_license_info.py applist.txt

Otherwise you will need to set environment variables before running get_sandbox_oss_license_info.py:

export VERACODE_API_KEY_ID=<YOUR_API_KEY_ID>
export VERACODE_API_KEY_SECRET=<YOUR_API_KEY_SECRET>
python3 get_sandbox_oss_license_info.py applist.txt