Skip to content

README.md

Latest commit

History

History
39 lines (27 loc) · 1.05 KB

README.md

File metadata and controls

39 lines (27 loc) · 1.05 KB
Raw

CVE-Validation-Library-CLI-Example

Based on this implementation: CVEProject/cve-validation-library#14

CLI

This repository provides a CLI to use the CVE Validation Library. Run the cve-validate command for validating CVE Records and CNA Containers from the shell or a CI pipeline.

Validate one or more files:

npx cve-validate record.json
npx cve-validate record1.json record2.json

Read from stdin (use - explicitly, or pipe with no arguments):

cat record.json | cve-validate

Validate a CNA Container instead of a full CVE Record:

cve-validate --type published-cna published-container.json
cve-validate --type rejected-cna rejected-container.json

Emit machine-readable JSON for scripting:

cve-validate --json record.json

Any registered warnings are printed beneath each result (and included in the --json output). The command exits 0 when every input is valid, 1 when any input is invalid or unreadable, and 2 on a usage error. Run cve-validate --help for the full list of options.