Skip to content

Commit c4abd6b

Browse files
julz0815julz0815
authored
Merge pull request #48 from veracode/develop
2 parents 522f0a2 + 5146bdf commit c4abd6b

16 files changed

+32545
-15
lines changed

‎.github/workflows/binary-ready-veracode-sast-pipeline-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272

7373
- name: Veracode Pipeline-Scan
7474
id: pipeline-scan
75-
uses: veracode/[email protected].15
75+
uses: veracode/[email protected].16
7676
with:
7777
vid: ${{ secrets.VERACODE_API_ID }}
7878
vkey: ${{ secrets.VERACODE_API_KEY }}

‎.github/workflows/binary-ready-veracode-sast-policy-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ jobs:
7171
run-id: ${{ github.event.client_payload.run_id }}
7272

7373
- name: Veracode Upload and Scan Action Step
74-
uses: veracode/[email protected].4
74+
uses: veracode/[email protected].5
7575
id: upload_and_scan
7676
with:
7777
vid: '${{ secrets.VERACODE_API_ID }}'

‎.github/workflows/binary-ready-veracode-sast-sandbox-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424

2525
- name: Veracode Upload and Scan Action Step
2626
id: upload_and_scan
27-
uses: veracode/[email protected].4
27+
uses: veracode/[email protected].5
2828
with:
2929
appname: ${{ github.event.client_payload.user_config.profile_name }}
3030
createprofile: true

‎.github/workflows/veracode-build-artifact-for-scanning.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,14 @@ on:
1717
type: string
1818

1919
jobs:
20+
build:
21+
if: ${{ inputs.event_name == 'java-pipeline-scan' || inputs.event_name == 'java-policy-scan' || inputs.event_name == 'java-sandbox-scan' || inputs.event_name == 'unidentified-lang-pipeline-scan' || inputs.event_name == 'unidentified-lang-policy-scan' || inputs.event_name == 'unidentified-lang-sandbox-scan' }}
22+
uses: ./.github/workflows/veracode-default-build.yml
23+
with:
24+
repository: ${{ inputs.repository }}
25+
ref: ${{ inputs.ref }}
26+
token: ${{ inputs.token }}
27+
2028
build-java-maven:
2129
if: ${{ inputs.event_name == 'java-maven-pipeline-scan' || inputs.event_name == 'java-maven-policy-scan' || inputs.event_name == 'java-maven-sandbox-scan' }}
2230
uses: ./.github/workflows/veracode-build-java-cli-maven.yml

‎.github/workflows/veracode-build-java-cli-gradle.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
with:
2828
java-version: 21
2929
distribution: oracle
30-
- name: Package the appliccation
30+
- name: Package the application
3131
env:
3232
VERACODE_API_KEY_ID: '${{ secrets.VERACODE_API_ID }}'
3333
VERACODE_API_KEY_SECRET: '${{ secrets.VERACODE_API_KEY }}'

‎.github/workflows/veracode-build-java-cli-maven.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
with:
3333
path: ~/.m2
3434
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
35-
- name: Package the appliccation
35+
- name: Package the application
3636
env:
3737
VERACODE_API_KEY_ID: '${{ secrets.VERACODE_API_ID }}'
3838
VERACODE_API_KEY_SECRET: '${{ secrets.VERACODE_API_KEY }}'

‎.github/workflows/veracode-code-analysis.yml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,10 @@ on:
2929
- scala-policy-scan
3030
- dart-pipeline-scan
3131
- dart-policy-sca
32+
- java-pipeline-scan
33+
- java-policy-scan
34+
- unidentified-lang-pipeline-scan
35+
- unidentified-lang-policy-scan
3236

3337
jobs:
3438
register:

‎.github/workflows/veracode-default-build.yml‎

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
name: Veracode Build
2+
on:
3+
workflow_call:
4+
inputs:
5+
repository:
6+
required: true
7+
type: string
8+
ref:
9+
required: true
10+
type: string
11+
token:
12+
required: true
13+
type: string
14+
jobs:
15+
build:
16+
runs-on: ubuntu-latest
17+
container:
18+
image: veracode/scm-packaging:latest
19+
env:
20+
VERACODE_API_KEY_ID: '${{ secrets.VERACODE_API_ID }}'
21+
VERACODE_API_KEY_SECRET: '${{ secrets.VERACODE_API_KEY }}'
22+
steps:
23+
- uses: actions/checkout@v4
24+
with:
25+
repository: ${{ inputs.repository }}
26+
ref: ${{ inputs.ref }}
27+
token: ${{ inputs.token }}
28+
29+
- uses: actions/checkout@v4
30+
with:
31+
path: 'veracode-helper'
32+
33+
- name: Package the application
34+
id: application_package
35+
env:
36+
VERACODE_API_KEY_ID: '${{ secrets.VERACODE_API_ID }}'
37+
VERACODE_API_KEY_SECRET: '${{ secrets.VERACODE_API_KEY }}'
38+
run: |
39+
cd veracode-helper/helper/cli
40+
cliFile=$(ls -1 . | head -n 1)
41+
cliFileName=$(echo "$cliFile" | cut -c 1-$((${#cliFile}-7)))
42+
tar -zxvf $cliFile
43+
cd $cliFileName
44+
export PATH="veracode-helper/helper/cli/$cliFileName:$PATH"
45+
cd /__w/veracode/veracode
46+
veracode package --source . --output veracode-artifacts --trust
47+
zip veracode-artifact.zip veracode-artifacts/* -x .zip .tar .tar.gz .gz
48+
49+
- name: Package error
50+
if: failure() && steps.application_package.outcome == 'failure'
51+
run: |
52+
echo "::error::Veracode static scan faced a problem. Please contact your Veracode administrator for more information."
53+
54+
- uses: actions/upload-artifact@v4
55+
with:
56+
name: veracode-artifact
57+
path: /__w/veracode/veracode/veracode-artifact.zip
58+
if-no-files-found: error

‎.github/workflows/veracode-iac-secrets-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
ref: ${{ github.event.client_payload.sha }}
5353
token: ${{ github.event.client_payload.token }}
5454
- name: Run Veracode IaC/Secrets Scanning
55-
uses: veracode/[email protected].2
55+
uses: veracode/[email protected].3
5656
with:
5757
vid: ${{ secrets.VERACODE_API_ID }}
5858
vkey: ${{ secrets.VERACODE_API_KEY }}

‎.github/workflows/veracode-pipeline-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
# run the pipeline scan action
7474
- name: Veracode Pipeline-Scan
7575
id: pipeline-scan
76-
uses: veracode/[email protected].15
76+
uses: veracode/[email protected].16
7777
with:
7878
vid: ${{ secrets.VERACODE_API_ID }}
7979
vkey: ${{ secrets.VERACODE_API_KEY }}

0 commit comments

Comments
 (0)