synopsys-sig-community/Polaris Analsysis

Will analyze the source code with Polaris by using the polaris Command Line tool. https://sig-docs.synopsys.com/polaris/topics/c_cli-overview.html

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stale
License: None

Inputs

name	description	required	default
project	Project name in Polaris, if not given then default=github.repository	no	${{github.repository}}
branch	Project branch name in Polaris, if not given then default=github.ref_name	no	${{github.ref_name}}
log_level	Logging level. Default is INFO.	no	INFO
polaris_config_overrides	With this you can overriding the configuration file. More info: https://sig-docs.synopsys.com/polaris/topics/c_cli-config-overrides.html	no	--co analyze.coverity.cov-analyze='["--enable", "HARDCODED_CREDENTIALS", "--security", "--webapp-security", "--android-security"]'
polaris_analysis_mode	Analysis mode will tell the action that is local or central analysis requested, Options are local and central (Default).	no	central
polaris_config_file	By giving this input, you specify which polaris.yaml file to use. If this is given, then only configurations given inside of the config file, will be used. If not given then will set polaris server url with flag -s	no	—
polaris_sarif	By setting this true, you will get results output as a sarif format file. Default is false.	no	false
polaris_sarif_only	By setting this true, you will get results output as a sarif format file without running the Polaris analysis. Default is false.	no	false
polaris_sarif_file	If polaris_sarif: true, then this is used, to specify the output file with full path. Default: github.workspace/polaris-scan-results.sarif.json	no	${{github.workspace}}/polaris-scan-results.sarif.json
polaris_issue_status	Indicates which issues are returned based on the status, if not given, then all are returned. Options are opened,closed.	no	—
build_command	Application build command. Ex. mvn clean install	no	—

Outputs

no outputs