Skip to content

Export dependencies for a repository

jboursier-mwb edited this page Sep 25, 2024 · 4 revisions

Note: this is also useful if one need to export a list of all dependencies from an organization (for compliance reasons for instance):

  1. Export the list of repositories: python3 src/cli.py repositories list -a false -d false -f list -o Malwarebytes -t xxxx repos.txt
  2. Use the dependabot command,

a) Either for one repository:

ghas-cli dependabot get_dependencies -f format -o org_name -t ghp_token -r repo_name

b) Or for an entire organization:

ghas-cli mass dependencies -o Malwarebytes -t ghp_token repos_list.txt

You can then choose the format between sbom, txt and csv. Both commands will output the results in stdout. You can redirect the output to a csv file after passing the -f csv flag and then load the spreadsheet in LibreOffice or Excel.