Merge pull request #56 from veracode/rewriteToTS

Rewrite action to TypeScript and remove Docker requirements

Author: julz0815

.github/workflows/policyscan.yml

@@ -17,25 +17,13 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v2 # Make java accessible on path so the uploadandscan action can run.
-        with: 
-          distribution: 'adopt'
-          java-version: '8'
-          
-      # zip the project and move it to a staging directory
-      - name: Zip Project
-        run: zip -R project.zip '*.py' '*.html' '*.htm' '*.js' '*.php' 'requirements.txt' '*.json' '*.lock' '*.ts' '*.pl' '*.pm' '*.plx' '*.pl5' '*.cgi' '*.go' '*.sum' '*.mod'
-        env:
-          build-name: project.zip
-      - uses: actions/upload-artifact@v3 # Copy files from repository to docker container so the next uploadandscan action can access them.
-        with:
-          path: project.zip # Wildcards can be used to filter the files copied into the container. See: https://github.com/actions/upload-artifact
-      - uses: veracode/veracode-uploadandscan-action@master # Run the uploadandscan action. Inputs are described above.
+      - uses: actions/checkout@v4
+      # Run the uploadandscan action. Inputs are described above.
+      - uses: veracode/veracode-uploadandscan-action@rewriteToTS
         with:
           appname: '${{ github.repository }}'
           version: '${{ github.run_id }}'
-          filepath: 'project.zip'
+          filepath: 'binaries_to_upload/hello.jar'
           vid: '${{ secrets.VERACODE_API_ID }}'
           vkey: '${{ secrets.VERACODE_API_KEY }}'
           scantimeout: 15

.gitignore

@@ -1,3 +1,6 @@
+node_modules/
+*.log
 .DS_Store
-runJava.sh
 VeracodeJavaAPI.jar
+Dockerfile
+entrypoint.sh

Dockerfile

@@ -147,13 +147,13 @@ jobs:
 
     steps:
       - name: Check out main branch
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Build with Maven # Compiling the .war binary from the checked out repo source code to upload to the scanner in the next step
         run: mvn -B package --file app/pom.xml
 
       - name: Veracode Upload And Scan
-        uses: veracode/veracode-uploadandscan-action@0.2.6
+        uses: veracode/veracode-uploadandscan-action@0.2.10
         with:
           appname: 'VeraDemo'
           createprofile: false
@@ -167,40 +167,3 @@ jobs:
 #          include: '*.war'
 #          criticality: 'VeryHigh'
 ```
-
-### Using This Action With a Mac Runner
-
-Docker is not installed on Mac runners by default, and [installing it can be time consuming](https://github.com/actions/runner/issues/1456). As an alternative, we suggest breaking the build and upload for languages that require a Mac runner to build (like iOS) into separate jobs. An example workflow is below:
-
-```yaml
-jobs:
-  build:
-    name: Build
-    runs-on: macos-12
-    
-    steps:
-      - name: checkout
-        uses: actions/checkout@v2
-      
-      # SNIP: steps to build an iOS application
-
-      - uses: actions/upload-artifact@v3
-        with:
-          path: path/to/iOSApplication.zip
-  scan:
-      name: Scan
-      runs-on: ubuntu-latest
-      needs: build
-      steps:
-        - uses: actions/download-artifact@v3
-          with:
-            path: iOSApplication.zip
-  
-        - name: Upload & Scan
-          uses: veracode/veracode-uploadandscan-action@0.2.6
-          with:
-            appname: 'MyTestApp'
-            filepath: 'iOSApplication.zip'
-            vid: 'FakeID'
-            vkey: 'FakeKey'
-```

README.md

@@ -93,33 +93,5 @@ inputs:
 #   time: # id of output
 #     description: 'The time we greeted you'
 runs:
-  using: 'docker'
-  image: 'Dockerfile'
-  args:
-    - ${{ inputs.appname }}
-    - ${{ inputs.createprofile }}
-    - ${{ inputs.filepath }}
-    - ${{ inputs.version }}
-    - ${{ inputs.vid }}
-    - ${{ inputs.vkey }}
-    - ${{ inputs.createsandbox}}
-    - ${{ inputs.sandboxname }}
-    - ${{ inputs.scantimeout }}
-    - ${{ inputs.exclude }}
-    - ${{ inputs.include }}
-    - ${{ inputs.criticality }}
-    - ${{ inputs.pattern }}
-    - ${{ inputs.replacement }}
-    - ${{ inputs.sandboxid }}
-    - ${{ inputs.scanallnonfataltoplevelmodules }}
-    - ${{ inputs.selected }}
-    - ${{ inputs.selectedpreviously }}
-    - ${{ inputs.teams }}
-    - ${{ inputs.toplevel }}
-    - ${{ inputs.deleteincompletescan }}
-    - ${{ inputs.scanpollinginterval }}
-    - ${{ inputs.javawrapperversion }}
-    - ${{ inputs.debug }}
-    - ${{ inputs.includenewmodules }}
-    - ${{ inputs.maxretrycount }}
-    - ${{ inputs.policy }}
+  using: 'node20'
+  main: 'dist/index.js'