Capycli

Latest version: v2.5.1

Safety actively analyzes 682382 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 7

1.5.0

* New parameter `-package-source` to specify a custom package manager.
The parameter is very helpful if your are in an environment where you cannot access
the internet, for example when running CI/CD on code.siemens.com.
Package metadata can get retrieved for example from BT-Artifactory:
* NPM: https://devops.bt.siemens.com/artifactory/api/npm/npm-all/
* Fix: NOT_README_OSS tags are now properly handled during Readme_OSS generation.
* The granularity check reset all release information which are not correct anymore after merging
them by granularity check.
* When downloading files in `bom createcomponents`, filenames are now updated according to
HTTP `content-disposition`.
* `bom diff` can now write lists of different and of identical BOM items.
* `bom map` has some improvements in package-url handling.
* `getdependencies javascript` has an improved method to determine source files.
* `getdependencies MavenList` has improved parsing of Maven output.
* `project create` can now use all data in projectinfo.json that conforms with the REST API
specification. It is now for example also possible to add attachment during project creation.
* New option -cx to support the CycloneDX SBOM format for the commands
* `bom diff`
* Unit tests for `bom diff` added.
* Improved help support:
* When `-h` is specified for a main command, a help on all respective subcommands.
Available for `bom`, `moverview`, `mapping`, `project`, `getdependencies`.
* When `-h` is specified for a sub-command, then a specific help for this sub-command is shown.
Available for `show bom`, `bom filter`, `bom diff`, `bom merge`, `bom check`, `bom granularity`,
`bom fromsbom`, `bom map`, `bom createcomponents`, `bom downloadsources`,
`mapping toxlsx`, `mapping tohtml`, `moverview toxlsx`, `moverview tohtml`,
`getdependencies python`, `getdependencies javascript`, `getdependencies nuget`,
`getdependencies mavenpom`, `getdependencies mavenlist`.

Pre-release 1.5.0b1 (2021-12-03)

* `bom filter` now supports trailing wildcards.
* Improved CycloneDX handling (schema 1.3) for commands `bom fromsbom` and `bom tosbom`.
* New option -cx to support the CycloneDX SBOM format for the commands
* `bom show`
* `bom filter`
* `bom map`
* `bom check`
* `bom createcomponents`
* `project create`
* `bom granularity`

1.4.1

* Fix wrong project id assignment in `project show`.

1.4

* `bom create` supports additional BOM fields `SourceFileType` and `SourceFileComment`
* `bom create` now supports updating of existing releases - source URL and
external ID will be added if not set already. Source file will be uploaded if
the existing release has no source attachments - otherwise `capycli` will
warn if existing upload doesn't match BOM. So `bom create` can be interrupted
and resumed at any time or just ran to verify existing releases.
* `getdependencies javascript` now creates package-urls and no longer npm-ids.
* `getdependencies nuget` now creates package-urls and no longer nuget-ids.

1.3

* `bom create` with `--dbx` option will reuse existing SW360 releases with
"similar" Debian versions. It will ignore epoch prefix ("2:") and ".debian"
suffix, so BOM entry "2:5.2.1-1.debian" will match SW360 release "5.2.1-1".
* `bom create` only downloads missing sources if --download is specified
* `bom create` now respects filename given in "SourceFile" also when "SourceFileUrl" is given
* `getdependencies python` now uses the common -source option to specify the folder for
downloading sources instead of the special --download_sources option
* `getdependencies mavenlist` allows now to specify a Maven dependency file using the -i option.
This file is then converted to a BOM.

1.2

* `project createbom` to create a CycloneDX SBOM file for an existing SW360 project.

1.1.1

* improve error output for `project create` and `bom CreateComponents`.
* fix: adapt moderators handling for `project create`.
* fix temp folder handling and attachment upload for `bom CreateComponents`.

Page 4 of 7

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.