actions-marketplace-validations/HCL AppScan CodeSweep

Scan for security issues in code

Trust Signals

name	description	required	default
asoc_key	API key for connecting to the AppScan service. Required when publish_on_merge is true.	no	—
asoc_secret	Secret for connecting to the AppScan service. Required when publish_on_merge is true.	no	—
service_url	The url of the AppScan service. Defaults to https://cloud.appscan.com.	no	—
acceptssl	Allow connections to a service with an untrusted certificate. Recommended for testing purposes only.	no	false
status	The status of the checks if any security issues are found. One of action_required, failure, or neutral.	no	neutral
publish_on_merge	Publish issues to ASoC when the pull request is merged.	no	false
application_id	The ASoC application id where issues will be published. Required when publish_on_merge is true.	no	—
issue_status	The status of issues that are pushed to ASoC. One of New, Open, In Progress, Noise, Fixed, or Passed.	no	Open
scan_base_name	When issues are published on merge, the base name of the scan used to submit those issues. A timestamp is appended to the given base name.	no	GitHub_CodeSweep
personal_scan	When issues are published on merge, the scan representing those issues can be made a personal scan.	no	false

no outputs