tech-r-us-qa/Veracode Dependency Scanning
An action to execute Veracode Agent-Based SCA and import findings as issues
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | Authorization token to query and create issues | yes | ${{ github.token }} |
| quick | Run the SRCCLR with the `--quick` options | no | false |
| update_advisor | Show update advisor | no | false |
| url | A git URL to work with in case the scan is not for the current repository | no | "" |
| create-issues | An attribute to instruct the action to create an issue from found vulnerability or just simple text output | no | false |
| path | A path within the repository where the build definition starts | no | . |
| debug | Run the SRCCLR in debug mode | no | false |
| skip-collectors | Run the SRCCLR with the `--skip-collectors` options | no | false |
| scan-collectors | Run the SRCCLR with the `--scan-collectors` options with comma separated values | no | "" |
| allow-dirty | Run the SRCCLR with the `--allow-dirty` option | no | false |
| recursive | Run the SRCCLR with the `--recursive` option | no | false |
| skip-vms | Run the SRCCLR with the `--skip-vms` option | no | false |
| no-graphs | Run the SRCCLR with the `--no-graphs` option | no | false |
| platformType | Specifies the platform environment type — use CLOUD for GitHub.com or ENTERPRISE for GitHub Enterprise Server (GHES). | no | CLOUD |
| breakBuildOnPolicyFindings | Break the build based on the Policy Findings | no | false |
Outputs
| name | description |
|---|---|
| scan-url | URL to the Veracode SCA scan results report |