cloudbees-io-gha/Perforce Klocwork SAST scan and publish to Unify Platform
Runs Perforce Klocwork SAST scan to detect vulnerabilities and risks and publishes to the Unify platform.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Nov 17, 2025
- License
- MIT
Pinned Snippet
uses: cloudbees-io-gha/perforce-klocwork-sast-publish@1c263e1340620018d631dbe6b1772a878767484e # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| cloudbees-url | Cloudbees API URL | no | https://api.cloudbees.io |
| enable-agent-scan | Specifies whether to enable the Klocwork Agent scan. | no | — |
| url | URL of the Klocwork server instance. | yes | — |
| license-host | Hostname of the Klocwork license server. | no | — |
| license-port | Port number used by the Klocwork license server. | no | — |
| username | Username for authenticating with the Klocwork server. | yes | — |
| token | Application token used for Klocwork authentication. | no | — |
| password | Password for the specified Klocwork user account. | no | — |
| project-name | Name of the Klocwork project to be analyzed. | no | — |
| build-name | Unique name identifying the Klocwork analysis build for the project. | no | — |
| build-directory | Path to the directory containing the source code to be scanned. | no | — |
| build-tool | Build tool used to compile the source code. | yes | — |
| build-spec-file | Path to the Klocwork build specification file. | no | — |
| tables-directory | Path to the Klocwork project tables directory used during the scan. | no | — |
| build-options | Additional options or parameters passed to the build tool during analysis. | no | — |
| scan-timeout | Maximum scan duration, in seconds, before timing out. | no | — |
| enable-local-scan | Enable Klocwork Local Scan | no | — |
| build-project-options | Klocwork scan build project command options | no | — |
| load-result-options | Klocwork scan load results command options | no | — |
| ref | Flag to indicate the ref that should be archived (same as supplied to checkout). | no | "" |
| workspace-dir | Flag to mention the path where the checked out code will be present. | no | "" |
| step-id | The ID of the step in the workflow | no | "" |
Outputs
| name | description |
|---|---|
| critical-count | A string containing the number of Critical security findings discovered during the scan. |
| very-high-count | A string containing the number of Very High security findings discovered during the scan. |
| high-count | A string containing the number of High security findings discovered during the scan. |
| medium-count | A string containing the number of Medium security findings discovered during the scan. |
| low-count | A string containing the number of Low security findings discovered during the scan. |