Commands¶
depinder <command> --help lists a command's options.
| Command | What it does | Network |
|---|---|---|
analyse |
Dependencies, licences, versions, vulnerabilities; writes the CSVs, and the Black Duck files for SBOM input | Resolver and vulnerability server; registries for what they do not answer and for cache entries older than --cache-max-age (default 1d); scanner databases and GitHub advisories when out of date |
github-advisories |
Local cache of GitHub reviewed advisories | GitHub API |
cache |
Inspect the SQLite cache; import legacy JSON | — |
update |
Refresh stale libraries in the SQLite cache | Resolver; registries for what it does not answer; GitHub with GH_TOKEN |
transformBlackDuckReports |
Reshape a raw Black Duck export | None |
addCategoriesToBlackDuckReports |
Add repository categories to it | None |
extractFrameworkVersion |
.NET and Java versions per manifest, to CSV | None |