📢 Version 1.2.1 of the GHAS Reporting Tool is out - a Python script to fetch GitHub Advanced Security alerts.

New Features in this release:
----------------------------------------------
Minor bug fixes

Change alert count behaviour - Alert counts now only show alert counts for selected scan types, or all if no scan types are specified

Fix command line option behaviour. The script now exits if alert type "--all" is specified together with additional alert type parameter(s)

Update requirements.txt to resolve 2 vulnerabilities in the cryptography and requests library.

#GitHub #NewRelease #GHAS #AppSec #InfoSec

https://github.com/rhe8502/ghas_report/releases/tag/v1.2.1

Release GHAS Reporting Tool v1.2.1 · rhe8502/ghas_report

Latest release of the GHAS Reporting Tool, a versatile Python script that retrieves GitHub Advanced Security (GHAS) alerts for specified organizations or repositories and generates reports based on...

GitHub

@rhe Cool!!

So this is a static export of the current alerts to csv, right? I’m still looking for something that doesn’t this with aggregation and over time, so that we can generate (adoption) graphs over time.

@Rob_Bos Yes correct, it's a point in time export. You can either dump the data to JSON with all the information in it, to individual CSV files, or an Excel wordbook.