The London Perl and Raku Workshop takes place on 26th Oct 2024. If your company depends on Perl, please consider sponsoring and/or attending.

NAME

CPANSEC::Admin::Command::CVEScan - Scans CVE entries for potential CPAN packages

SYNOPSIS

    cpansec-admin cvescan  [-q | --quiet] [--triage-dir=<path>]
                           [--from=<value>] [--limit=<value>]
                           [--ignore=<path>] [--no-index-update]

DESCRIPTION

This command scans CVE entries to triage for potential CPAN packages.

ARGUMENTS

    -q, --quiet               Silence all output, except for errors. Can
                              also be set via the CPANSEC_QUIET environment
                              variable.

    --triage-dir=<path>       Use a custom path for the triage (destination)
                              folder. Defaults to "./triage". Can also be set
                              via the CPANSEC_TRIAGE_DIR environment variable.

    --index-file=<path>       Reads the given file for a single line
                              containing the index of the last visited CVE.
                              Defaults to the "last_visited_index" file inside
                              the specified triage folder. Can also be set via
                              the CPANSEC_INDEX_FILE environment variable.

    --from=<index>            Start scan from an index other than the one
                              defined by "--index-file". Can also be set via
                              the CPANSEC_FROM environment variable.

    --limit=<value>           Limit the amount of CVEs to fetch. Defaults to
                              the NVD server-side limit, currently at 2K. Can
                              also be set via the CPANSEC_LIMIT environment
                              variable.

    --ignore=<path>           Reads a file containing a list of CVE entries to
                              ignore when scanning. Can also be set via the
                              CPANSEC_IGNORE environment variable.

    --no-index-update         Use this flag to prevent the index file from
                              being updated at the end of the scan. Can also
                              be set via the CPANSEC_NO_INDEX_UPDATE
                              environment variable.