hcl-tech-software/HCL AppScan CodeSweep
Scan for security issues in code
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| asoc_key | API key for connecting to the AppScan service. Required when publish_on_merge is true. | no | — |
| asoc_secret | Secret for connecting to the AppScan service. Required when publish_on_merge is true. | no | — |
| service_url | The url of the AppScan service. Defaults to https://cloud.appscan.com. | no | — |
| acceptssl | Allow connections to a service with an untrusted certificate. Recommended for testing purposes only. | no | false |
| status | The status of the checks if any security issues are found. One of action_required, failure, or neutral. | no | neutral |
| publish_on_merge | Publish issues to ASoC when the pull request is merged. | no | false |
| application_id | The ASoC application id where issues will be published. Required when publish_on_merge is true. | no | — |
| issue_status | The status of issues that are pushed to ASoC. One of New, Open, In Progress, Noise, Fixed, or Passed. | no | Open |
| scan_base_name | When issues are published on merge, the base name of the scan used to submit those issues. A timestamp is appended to the given base name. | no | GitHub_CodeSweep |
| personal_scan | When issues are published on merge, the scan representing those issues can be made a personal scan. | no | false |
Outputs
no outputs