cloudbees-io-gha/Checkmarx One SAST scan and publish to Unify Platform
Runs Checkmarx One SAST scan to detect security vulnerabilities in source code and publishes to the Unify platform.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| cloudbees-url | Cloudbees API URL | no | https://api.cloudbees.io |
| url | CheckmarxOne base URL | yes | — |
| tenant | CheckmarxOne tenant name | yes | — |
| api-key | CheckmarxOne API key for authentication | yes | — |
| severity | Filter SAST results by severity. Comma-separated values: critical, high, medium, low, info. Leave empty to include all. | no | — |
| ref | Flag to indicate the ref that should be archived (same as supplied to checkout). | no | "" |
| workspace-dir | Flag to mention the path where the checked out code will be present. | no | "" |
| step-id | The ID of the step in the workflow | no | "" |
Outputs
| name | description |
|---|---|
| critical-count | A string containing the number of Critical security findings discovered during the scan. |
| very-high-count | A string containing the number of Very High security findings discovered during the scan. |
| high-count | A string containing the number of High security findings discovered during the scan. |
| medium-count | A string containing the number of Medium security findings discovered during the scan. |
| low-count | A string containing the number of Low security findings discovered during the scan. |