veracode/Veracode GitHub Workflow Tool Helper functions
Helper functions for GitHub Workflow Tool - Currently supports validations and process scan results.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| action | Action to take | yes | — |
| vid | Veracode ID | yes | — |
| vkey | Veracode Key | yes | — |
| appname | Veracode Application Name | yes | — |
| token | your GITHUB_TOKEN | no | — |
| check_run_id | GitHub Check Run ID | no | — |
| source_repository | Source Repository | no | — |
| fail_checks_on_policy | Fail Checks if Policy Fails | no | — |
| fail_checks_on_error | Fail Checks if there are Build Errors | no | — |
| sandboxname | Sandbox Name | no | — |
| policyname | Policy Name | no | — |
| path | Path | no | — |
| start_line | Start line | no | — |
| end_line | End line | no | — |
| break_build_invalid_policy | Break build on invalid policy name | no | — |
| filter_mitigated_flaws | Filter pipeline scan results based on mitigated flaws (true) or all policy flaws (false) | no | — |
| check_run_name | Check run name | no | — |
| head_sha | Head SHA of the commit | no | — |
| branch | Head branch | no | — |
| event_type | Event type - Describe the policy, pipeline or sandbox scan. | no | — |
| issue_trigger_flow | A flag to identify if the scan was invoked by issue comment or creation. | no | — |
| workflow_app | Is this action called from the Veracode Workflow App | no | true |
| line_number_slop | Line number slop | no | 3 |
| pipeline_scan_flaw_filter | Pipeline Scan Flaw filter | no | policy_violations |
| filtered_results_file | Filtered results file | no | — |
| gitRepositoryUrl | Git Repository Url | no | — |
| trim_to_size | The number of sandboxes to keep when a trim_to_size action is selected | no | — |
| platformType | Specifies the platform environment type — use CLOUD for GitHub.com or ENTERPRISE for GitHub Enterprise Server (GHES). | no | CLOUD |
Outputs
no outputs