11name : Binary Ready - Veracode Static Sandbox Scanner
22
3- run-name : Binary Ready - Static Sandbox Scanner - ${{ github.event.client_payload.repository.name }}
3+ run-name : Binary Ready - Veracode Sandbox Scan - ${{ github.event.client_payload.repository.name }}
44
55concurrency :
66 group : ${{ github.event.client_payload.event_type }}-${{ github.event.client_payload.repository.name }}-${{ github.event.client_payload.repository.branch }}
1111 types : [binary-ready-veracode-sast-sandbox-scan]
1212
1313jobs :
14- register :
15- uses : ./.github/workflows/veracode-check-run.yml
16- with :
17- check_run_name : ${{ github.workflow }}
18- head_sha : ${{ github.event.client_payload.sha }}
19- repositroy_owner : ${{ github.event.client_payload.repository.owner }}
20- repositroy_name : ${{ github.event.client_payload.repository.name }}
21- event_type : ${{ github.event.client_payload.event_type }}
22- github_token : ${{ github.event.client_payload.token }}
23- run_id : ${{ github.run_id }}
24- branch : ${{ github.event.client_payload.repository.branch }}
25-
26- validations :
27- needs : register
28- runs-on : ubuntu-latest
29- name : Validations
30- steps :
31- - name : Verify Veracode API credentials
32- id : verify_api_creds
33- uses : veracode/github-actions-integration-helper@main
34- with :
35- action : validateVeracodeApiCreds
36- token : ${{ github.event.client_payload.token }}
37- vid : ${{ secrets.VERACODE_API_ID }}
38- vkey : ${{ secrets.VERACODE_API_KEY }}
39- appname : ${{ github.event.client_payload.user_config.profile_name }}
40- source_repository : ${{ github.event.client_payload.repository.full_name }}
41- check_run_id : ${{ needs.register.outputs.run_id }}
42-
43- - name : Verify Policy name
44- id : verify_policy_name
45- if : success()
46- uses : veracode/github-actions-integration-helper@main
47- with :
48- action : validatePolicyName
49- token : ${{ github.event.client_payload.token }}
50- vid : ${{ secrets.VERACODE_API_ID }}
51- vkey : ${{ secrets.VERACODE_API_KEY }}
52- appname : ${{ github.event.client_payload.user_config.profile_name }}
53- source_repository : ${{ github.event.client_payload.repository.full_name }}
54- check_run_id : ${{ needs.register.outputs.run_id }}
55- policyname : ${{ github.event.client_payload.policy_name }}
56- path : ${{ github.event.client_payload.annotationObj.path }}
57- start_line : ${{ github.event.client_payload.annotationObj.start_line }}
58- end_line : ${{ github.event.client_payload.annotationObj.end_line }}
59- break_build_invalid_policy : ${{github.event.client_payload.break_build_invalid_policy }}
60-
6114 sandbox_scan :
62- needs : [register, validations]
6315 runs-on : ubuntu-latest
6416 steps :
6517 - name : Download artifact
8436 createsandbox : true
8537 sandboxname : GitHub App Scans-${{ github.event.client_payload.repository.branch }}
8638 # include: ${{ github.event.client_payload.modules_to_scan }}
87- failbuild : ${{ github.event.client_payload.user_config.break_build_policy_findings }}
39+ failbuild : ${{ github.event.client_payload.user_config.break_build_policy_findings }}
0 commit comments