Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
Menu
Open sidebar
Jeffrey H. Johnson
gfcp
Commits
e9c82cbb
Verified
Commit
e9c82cbb
authored
Jan 03, 2021
by
Jeffrey H. Johnson
Committed by
Jeffrey H. Johnson
Jan 03, 2021
Browse files
Delete veracode-analysis.yml
parent
fc1c614b
Changes
1
Hide whitespace changes
Inline
Side-by-side
.github/workflows/veracode-analysis.yml
deleted
100644 → 0
View file @
fc1c614b
name
:
Veracode Static Analysis Pipeline Scan
on
:
push
:
branches
:
[
master
]
pull_request
:
branches
:
[
master
]
jobs
:
build-and-pipeline-scan
:
runs-on
:
ubuntu-latest
steps
:
-
uses
:
actions/checkout@v2
with
:
repository
:
'
'
-
uses
:
papeloto/action-zip@v1
with
:
files
:
/
recursive
:
true
dest
:
veracode-pipeline-scan-results-to-sarif.zip
-
uses
:
actions/upload-artifact@v1
with
:
name
:
my-artifact
path
:
veracode-pipeline-scan-results-to-sarif.zip
-
uses
:
wei/curl@master
with
:
args
:
-O https://downloads.veracode.com/securityscan/pipeline-scan-LATEST.zip
-
run
:
unzip -o pipeline-scan-LATEST.zip
-
uses
:
actions/setup-java@v1
with
:
java-version
:
1.8
-
run
:
java -jar pipeline-scan.jar --veracode_api_id "${{secrets.VERACODE_API_ID}}" --veracode_api_key "${{secrets.VERACODE_API_KEY}}" --fail_on_severity="Very High, High" --file veracode-pipeline-scan-results-to-sarif.zip
continue-on-error
:
true
-
uses
:
actions/upload-artifact@v1
with
:
name
:
ScanResults
path
:
results.json
-
name
:
Convert pipeline scan output to SARIF format
id
:
convert
uses
:
veracode/veracode-pipeline-scan-results-to-sarif@master
with
:
pipeline-results-json
:
results.json
-
uses
:
github/codeql-action/upload-sarif@v1
with
:
sarif_file
:
veracode-results.sarif
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment