Skip to content

Commit ef5d102

Browse files
shailesh-veracodeshailesh-veracode
committed
updated the version for action-helper
1 parent e002245 commit ef5d102

8 files changed

+134
-13
lines changed

‎.github/workflows/binary-ready-veracode-sast-pipeline-scan.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].0
33+
uses: veracode/[email protected].1
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}
@@ -43,7 +43,7 @@ jobs:
4343
- name: Verify Policy name
4444
id: verify_policy_name
4545
if: success()
46-
uses: veracode/[email protected].0
46+
uses: veracode/[email protected].1
4747
with:
4848
action: validatePolicyName
4949
token: ${{ github.event.client_payload.token }}
@@ -89,7 +89,7 @@ jobs:
8989
- name: Veracode Pipeline Results
9090
if: always()
9191
id: prepare-results
92-
uses: Veracode/github-actions-integration-helper@main
92+
uses: Veracode/github-actions-integration-helper@feature/DXS-358
9393
with:
9494
action: 'preparePipelineResults'
9595
token: ${{ github.event.client_payload.token }}

‎.github/workflows/binary-ready-veracode-sast-policy-scan.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].0
33+
uses: veracode/[email protected].1
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}
@@ -43,7 +43,7 @@ jobs:
4343
- name: Verify Policy name
4444
id: verify_policy_name
4545
if: success()
46-
uses: veracode/[email protected].0
46+
uses: veracode/[email protected].1
4747
with:
4848
action: validatePolicyName
4949
token: ${{ github.event.client_payload.token }}
@@ -94,7 +94,7 @@ jobs:
9494
- name: Veracode Policy Results
9595
id: prepare-results
9696
if: always()
97-
uses: Veracode/github-actions-integration-helper@main
97+
uses: Veracode/github-actions-integration-helper@v0.1.1
9898
with:
9999
action: 'preparePolicyResults'
100100
token: ${{ github.event.client_payload.token }}

‎.github/workflows/binary-ready-veracode-sast-sandbox-scan.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].0
33+
uses: veracode/[email protected].1
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}
@@ -43,7 +43,7 @@ jobs:
4343
- name: Verify Policy name
4444
id: verify_policy_name
4545
if: success()
46-
uses: veracode/[email protected].0
46+
uses: veracode/[email protected].1
4747
with:
4848
action: validatePolicyName
4949
token: ${{ github.event.client_payload.token }}

‎.github/workflows/flaws_report.yml‎

Lines changed: 121 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,121 @@
1+
name: Veracode Flaws Report
2+
3+
on:
4+
workflow_call:
5+
inputs:
6+
policy_name:
7+
required: true
8+
type: string
9+
owner:
10+
required: true
11+
type: string
12+
repo:
13+
required: true
14+
type: string
15+
sha:
16+
required: true
17+
type: string
18+
token:
19+
required: true
20+
type: string
21+
ref:
22+
required: true
23+
type: string
24+
create_code_scanning_alert:
25+
required: true
26+
type: boolean
27+
create_issue:
28+
required: true
29+
type: boolean
30+
check_run_id:
31+
required: true
32+
type: string
33+
source_repository:
34+
required: true
35+
type: string
36+
profile_name:
37+
required: true
38+
type: string
39+
break_build_policy_findings:
40+
required: true
41+
type: string
42+
break_build_on_error:
43+
required: true
44+
type: string
45+
filter_mitigated_flaws:
46+
required: true
47+
type: string
48+
language:
49+
required: true
50+
type: string
51+
52+
jobs:
53+
code-scanning-alert:
54+
needs: pipeline_scan
55+
runs-on: ubuntu-latest
56+
if: ${{ inputs.create_code_scanning_alert && always() }}
57+
name: Create code scanning alerts
58+
steps:
59+
- name: Get scan results
60+
uses: actions/download-artifact@v4
61+
with:
62+
name: "Veracode Pipeline-Scan Mitigated Filtered Results"
63+
64+
- name: Convert pipeline scan output to SARIF format for java language
65+
if: inputs.language == 'Java'
66+
uses: Veracode/veracode-pipeline-scan-results-to-sarif@master
67+
with:
68+
pipeline-results-json: filtered_results.json
69+
output-results-sarif: veracode-results.sarif
70+
repo_owner: ${{ inputs.owner }}
71+
repo_name: ${{ inputs.repo }}
72+
commitSHA: ${{ inputs.sha }}
73+
ref: ${{ inputs.ref }}
74+
githubToken: ${{ inputs.token }}
75+
source-base-path-1: 'com/:src/main/java/com/'
76+
source-base-path-2: 'WEB-INF:src/main/webapp/WEB-INF'
77+
78+
- name: Convert pipeline scan output to SARIF format for non java language
79+
if: inputs.language != 'Java'
80+
uses: Veracode/veracode-pipeline-scan-results-to-sarif@master
81+
with:
82+
pipeline-results-json: filtered_results.json
83+
output-results-sarif: veracode-results.sarif
84+
repo_owner: ${{ inputs.owner }}
85+
repo_name: ${{ inputs.repo }}
86+
commitSHA: ${{ inputs.sha }}
87+
ref: ${{ inputs.ref }}
88+
githubToken: ${{ inputs.token }}
89+
90+
create-issues:
91+
needs: pipeline_scan
92+
runs-on: ubuntu-latest
93+
if: ${{ inputs.create_issue && always() }}
94+
name: Create issues
95+
steps:
96+
- name: Get scan results
97+
uses: actions/download-artifact@v4
98+
with:
99+
name: 'Veracode Pipeline-Scan Mitigated Filtered Results'
100+
101+
- name: Create flaws as issues for java language
102+
if: inputs.language == 'Java'
103+
uses: veracode/[email protected]
104+
with:
105+
scan-results-json: 'filtered_results.json'
106+
repo_owner: ${{ inputs.owner }}
107+
github-token: ${{ inputs.token }}
108+
repo_name: ${{ inputs.repo }}
109+
commitHash: ${{ inputs.sha }}
110+
source_base_path_1: 'com/:src/main/java/com/'
111+
source_base_path_2: 'WEB-INF:src/main/webapp/WEB-INF'
112+
113+
- name: Create flaws as issues for non java language
114+
if: inputs.language != 'Java'
115+
uses: veracode/[email protected]
116+
with:
117+
scan-results-json: 'filtered_results.json'
118+
repo_owner: ${{ inputs.owner }}
119+
repo_name: ${{ inputs.repo }}
120+
github-token: ${{ inputs.token }}
121+
commitHash: ${{ inputs.sha }}

‎.github/workflows/veracode-code-analysis.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
steps:
6060
- name: Verify Veracode API credentials
6161
id: verify_api_creds
62-
uses: veracode/[email protected].0
62+
uses: veracode/[email protected].1
6363
with:
6464
action: validateVeracodeApiCreds
6565
token: ${{ github.event.client_payload.token }}
@@ -72,7 +72,7 @@ jobs:
7272
- name: Verify Policy name
7373
id: verify_policy_name
7474
if: success()
75-
uses: veracode/[email protected].0
75+
uses: veracode/[email protected].1
7676
with:
7777
action: validatePolicyName
7878
token: ${{ github.event.client_payload.token }}

‎.github/workflows/veracode-iac-secrets-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].0
33+
uses: veracode/[email protected].1
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}

‎.github/workflows/veracode-policy-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -93,7 +93,7 @@ jobs:
9393
- name: Veracode Policy Results
9494
id: prepare-results
9595
if: always()
96-
uses: Veracode/github-actions-integration-helper@main
96+
uses: Veracode/github-actions-integration-helper@v0.1.1
9797
with:
9898
action: 'preparePolicyResults'
9999
token: ${{ inputs.token }}

‎.github/workflows/veracode-remove-sandbox.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
runs-on: ubuntu-latest
3535
name: Remove Sandbox
3636
steps:
37-
- uses: veracode/[email protected].0
37+
- uses: veracode/[email protected].1
3838
with:
3939
action: 'removeSandbox'
4040
vid: ${{ secrets.VERACODE_API_ID }}

0 commit comments

Comments
 (0)