Project stakeholders want to know which files are affected with vulnerabilities after a Blackduck HUB scan.

The current blackduck generates multiple reports. To fulfill above requirement once has to refer 2 different reports to really able to trace the source files affected.

1. Produces customized report where we can see vulnerability, OSS name, affected source path details all in one report

2. Color coded

   low risk = no color

   medium risk = Yellow

   High risk = Red

3. Omits all other files which has no vulnerabilities.

Go to Your Blackduck Project > Generate 'Create Version detail report' > checkbox Source and Vulnerabilities checked.

pip install bdvr

usage:bdvr [-h] -p P [-o]

options:
  -h, --help  show this help message and exit
  -p P        Blackduck report folder is ex: D:\BD_REPORT\PROJECT_DATETIMESTAMP.zip
  -o          (Optional) To automatically open the file

bdvr -p Blackduck_generated_reports.zip

#To automatically open the file add -o option
bdvr -p Blackduck_generated_reports.zip -o

Thanks to all authors. As this library uses below modules
pandas = "^1.4.3"
quo = "^2022.8.2"
universal-startfile = "^0.1.3"

Please send your bugs to [email protected]

MIT