actions-marketplace-validations/Veracode Dependency Scanning

An action to execute Veracode Agent-Based SCA and import findings as issues

Trust Signals

name	description	required	default
github_token	Authorization token to query and create issues	yes	${{ github.token }}
quick	Run the SRCCLR with the `--quick` options	no	false
update_advisor	Show update advisor	no	false
url	A git URL to work with in case the scan is not for the current repository	no	""
create-issues	An attribute to instruct the action to create an issue from found vulnerability or just simple text output	no	false
json-output	An attribute to instruct the action to generate JSON output (scaResults.json) instead of text output (scaResults.txt)	no	false
path	A path within the repository where the build definition starts	no	.
debug	Run the SRCCLR in debug mode	no	false
skip-collectors	Run the SRCCLR with the `--skip-collectors` options	no	false
scan-collectors	Run the SRCCLR with the `--scan-collectors` options with comma separated values	no	""
allow-dirty	Run the SRCCLR with the `--allow-dirty` option	no	false
recursive	Run the SRCCLR with the `--recursive` option	no	false
skip-vms	Run the SRCCLR with the `--skip-vms` option	no	false
no-graphs	Run the SRCCLR with the `--no-graphs` option	no	false
platformType	Specifies the platform environment type — use CLOUD for GitHub.com or ENTERPRISE for GitHub Enterprise Server (GHES).	no	CLOUD
breakBuildOnPolicyFindings	Break the build based on the Policy Findings	no	false
sca_fix_enabled	Enable SCA fix vulnerability listing generation	no	false
profile_name	Profile name for SCA vuln list metadata	no	""
pr_number	Pull request number for SCA vuln list metadata	no	""

name	description
scan-url	URL to the Veracode SCA scan results report