codedx/SRM Analysis

Analyze your source code and binaries with SRM

Trust Signals

name	description	required	default
server-url	the URL for the SRM server (typically ends with `/srm`)	yes	—
api-key	an API key or Personal Access Token (PAT) to use when connecting to SRM	yes	—
project-id	the ID of a project (an integer) created in SRM. This is required if `project-name` is not specified.	no	—
project-name	the name of a project created in SRM. This is required if `project-id` is not specified.	no	—
auto-create-project	whether SRM should automatically create a project with the given `project-name` if it does not yet exist.	no	false
base-branch-name	the parent branch name of a project created in SRM	no	—
target-branch-name	the target branch name of a project created in SRM. SRM automatically creates the branch if it does not exist yet in the project, and the new branch will be created from `base-branch-name`	no	—
source-and-binaries-glob	a file glob matching source and binary files (accepts multiple comma-separated globs). if not set, no source/binary files will be sent to SRM	yes	—
tool-outputs-glob	a file glob matching output files (ie scan results) from an analysis tool (accepts multiple comma-separated globs)	no	—
wait-for-completion	whether to wait for the analysis to complete. if true, will fail the build if the analysis encountered an error.	no	false
ca-cert	a custom CA cert to use for HTTPS requests to SRM	no	—
dry-run	whether to submit an analysis (false/undefined), or only test the connection and credentials (true). an error in validation will fail the build.	no	false

no outputs