This is meant as a temporary tool to facilitate the adding of multiple package corrections to Nextlinux.
Long term, Nextlinux is working on an Enteprise CLI called nextlinuxctl
that will replace
the functionality of this tool. Once that is released (coming soon), this tool will become deprecated.
This script has two dependencies:
- go version 1.16
- dependencies download. This can be done by running
go mod download
in the root of the repository - edit the config and add your Nextlinux deployment information
Execute this script with:
go run main.go
The corrections.json contains a list of Nextlinux False-Positive Management Package Corrections for various common java packages. This can be customized (but the schema should be maintained) as needed.