plugin.yml

name: Data Theorem Mobile Secure
description: |
  Data Theorem's Mobile Secure will scan each pre-production release automatically (up to 7000 releases/day) for security & privacy issues using static, dynamic, and behavioral analysis for both iOS and Android applications.

  More information can be found here:
  https://www.datatheorem.com/products/mobile-secure
author: https://github.com/datatheorem
requirements:
  - curl
  - jq
configuration:
  properties:
    UPLOAD_API_KEY:
      type: string
    BINARY_PATH:
      type: string
    SOURCEMAP_PATH:
      type: string
    POLL_SCAN_RESULTS:
      type: "boolean"
      default: false
      description: |
        If the plugin should wait until the scan is completed and check the scan results
        When set to `true`, `MOBILE_RESULTS_API_KEY` also needs to be set
    MOBILE_RESULTS_API_KEY:
      type: string
    BLOCK_ON_SEVERITY:
      type: string
      enum: ["HIGH", "MEDIUM", "LOW"]
      description: |
        Block the build if vulnerabilities are found at or above the specified severity level.
        When set, the plugin will automatically enable polling and require MOBILE_RESULTS_API_KEY.
        HIGH: Block on high severity vulnerabilities only
        MEDIUM: Block on medium and high severity vulnerabilities
        LOW: Block on all severity vulnerabilities (low, medium, high)
    POLLING_TIMEOUT:
      type: number
      default: 300
      description: |
        Timeout duration in seconds for polling scan results.
        Default is 300 seconds (5 minutes).
        Only applies when POLL_SCAN_RESULTS is true or BLOCK_ON_SEVERITY is set.
  required:
    - UPLOAD_API_KEY
    - BINARY_PATH
  additionalProperties: false