vcode-john/Veracode Config
Bootstraps Veracode Application Profiles and publishes reusable workflow configuration outputs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| veracode_api_id | Veracode API ID (HMAC) | yes | — |
| veracode_api_key | Veracode API secret key (HMAC) | yes | — |
| veracode_api_base_url | Veracode API base URL | no | https://api.veracode.com |
| application_name | Application profile name. Defaults to <owner>/<repo>. | no | — |
| business_criticality | Business criticality for profile creation | no | MEDIUM |
| business_unit_guid | Business unit GUID used when creating a profile | no | — |
| policy_guid | Policy GUID used when creating a profile | no | — |
| team_guids | Comma-separated team GUIDs used when creating a profile | no | — |
| application_description | Optional description for profile creation | no | — |
| inventory_path | Path to inventory (defaults to GITHUB_WORKSPACE) | no | — |
| refresh_inventory | If true, always re-run repository inventory even if metadata exists | no | false |
| update_custom_metadata | If true, writes inventory and workflow config back into custom metadata fields | no | true |
| languages_metadata_field | Custom metadata field name used to store language inventory | no | repo_languages |
| package_managers_metadata_field | Custom metadata field name used to store package manager inventory | no | repo_package_managers |
| build_definitions_metadata_field | Custom metadata field name used to store non-GitHub build definitions | no | repo_build_definitions |
| workflow_config_metadata_field | Custom metadata field name used to store derived workflow config | no | workflow_config |
| custom_metadata_max_length | Max length for each metadata field value | no | 255 |
Outputs
| name | description |
|---|---|
| application_guid | Veracode application profile GUID |
| application_name | Veracode application profile name |
| application_created | true when the action created a new profile |
| business_criticality | Application business criticality |
| policy_guid | Primary policy GUID from the application profile |
| primary_language | Primary repository language by bytes |
| languages_by_bytes | JSON object of language volumes (bytes) |
| package_managers | JSON array of detected package managers |
| non_github_build_definitions | JSON array of detected non-GitHub build definitions |
| workflow_config_json | Derived or reused workflow configuration (JSON) |
| workflow_config_source | custom_metadata when reused, derived when newly generated |