cloudbees-io/perforce-klocwork-sast-plugin

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 9, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: cloudbees-io/perforce-klocwork-sast-plugin@ecb3554642e263bb641eda4d7c7b6245fe90028c # v1.0.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
enable-agent-scanEnable Klocwork Agent Scanno
urlKlocwork host URLyes
license-hostKlocwork license server hostnameno
license-portKlocwork license server portno
usernameKlocwork usernameyes
tokenKlocwork application tokenno
passwordKlocwork passwordno
project-nameKlocwork project nameno
build-nameKlocwork build nameno
build-directoryKlocwork build directoryno
build-toolKlocwork build toolyes
build-spec-fileKlocwork build specification file pathno
tables-directoryKlocwork scan tables directoryno
build-optionsKlocwork scan build optionsno
scan-timeoutKlocwork scan waiting time in secondsno
enable-local-scanEnable Klocwork Local Scanno
build-project-optionsKlocwork scan build project command optionsno
load-result-optionsKlocwork scan load results command optionsno
refFlag to indicate the ref that should be archived (same as supplied to checkout)no""
workspace-dirFlag to mention the path where the checked out code will be presentno""
namedescription
critical-countA string containing the number of Critical security findings discovered during the scan.
very-high-countA string containing the number of Very High security findings discovered during the scan.
high-countA string containing the number of High security findings discovered during the scan.
medium-countA string containing the number of Medium security findings discovered during the scan.
low-countA string containing the number of Low security findings discovered during the scan.