output engine: threats: Generate THREATS.md file

Signed-off-by: John Andersen <[email protected]>

Author: pdxjohnny

cve_bin_tool/cli.py

@@ -186,7 +186,7 @@ def main(argv=None):
         "-f",
         "--format",
         action="store",
-        choices=["csv", "json", "console", "html", "pdf"],
+        choices=["csv", "json", "console", "html", "pdf", "md"],
         help="update output format (default: console)",
         default="console",
     )

cve_bin_tool/output_engine/__init__.py

@@ -17,6 +17,7 @@
 from ..version import VERSION
 from .console import output_console
 from .html import output_html
+from .threats import output_threats
 from .util import (
     add_extension_if_not,
     format_output,
@@ -390,6 +391,22 @@ def output_cves(self, outfile, output_type="console"):
                 self.logger,
                 outfile,
             )
+        elif output_type == "md":
+            if self.filename.endswith("THREATS.md"):
+                output_threats(
+                    self.all_cve_data,
+                    self.scanned_dir,
+                    self.filename,
+                    self.themes_dir,
+                    self.total_files,
+                    self.products_with_cve,
+                    self.products_without_cve,
+                    self.merge_report,
+                    self.logger,
+                    outfile,
+                )
+            else:
+                raise NotImplementedError("Only generating THREATS.md currently supported. Attempted output to {self.filename!r}.")
         else:  # console, or anything else that is unrecognised
             output_console(
                 self.all_cve_data,