Skip to content

Commit 47da2be

Browse files
jeradcliffejeradcliffe
authored
Merge pull request #52 from veracode/REPO-723-differentiate-between-static-scans
https://veracode.atlassian.net/browse/RMC-9450
2 parents 0ebfa99 + fcd26f2 commit 47da2be

11 files changed

+24
-31
lines changed

‎.github/workflows/binary-ready-veracode-sast-pipeline-scan.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].2
33+
uses: veracode/[email protected].3
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}
@@ -43,7 +43,7 @@ jobs:
4343
- name: Verify Policy name
4444
id: verify_policy_name
4545
if: success()
46-
uses: veracode/[email protected].2
46+
uses: veracode/[email protected].3
4747
with:
4848
action: validatePolicyName
4949
token: ${{ github.event.client_payload.token }}
@@ -83,7 +83,7 @@ jobs:
8383
- name: Veracode Pipeline Results
8484
if: always()
8585
id: prepare-results
86-
uses: Veracode/[email protected].2
86+
uses: Veracode/[email protected].3
8787
with:
8888
action: 'preparePipelineResults'
8989
token: ${{ github.event.client_payload.token }}

‎.github/workflows/binary-ready-veracode-sast-policy-scan.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].2
33+
uses: veracode/[email protected].3
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}
@@ -43,7 +43,7 @@ jobs:
4343
- name: Verify Policy name
4444
id: verify_policy_name
4545
if: success()
46-
uses: veracode/[email protected].2
46+
uses: veracode/[email protected].3
4747
with:
4848
action: validatePolicyName
4949
token: ${{ github.event.client_payload.token }}
@@ -88,7 +88,7 @@ jobs:
8888
- name: Veracode Policy Results
8989
id: prepare-results
9090
if: always()
91-
uses: Veracode/[email protected].2
91+
uses: Veracode/[email protected].3
9292
with:
9393
action: 'preparePolicyResults'
9494
token: ${{ github.event.client_payload.token }}
@@ -107,7 +107,7 @@ jobs:
107107
if: ${{ github.event.client_payload.user_config.sandbox_scan.execute_remove_sandbox_action && always() }}
108108
name: Remove Sandbox
109109
steps:
110-
- uses: veracode/[email protected].2
110+
- uses: veracode/[email protected].3
111111
with:
112112
action: 'removeSandbox'
113113
vid: ${{ secrets.VERACODE_API_ID }}

‎.github/workflows/template-register.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
steps:
1515
- name: Register build
1616
id: register-build
17-
uses: veracode/[email protected].2
17+
uses: veracode/[email protected].3
1818
with:
1919
action: registerBuild
2020
token: ${{ github.event.client_payload.token }}

‎.github/workflows/veracode-build-artifact-for-scanning.yml

+1-9
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ on:
1818

1919
jobs:
2020
build:
21-
if: ${{ inputs.event_name == 'java-pipeline-scan' || inputs.event_name == 'java-policy-scan' || inputs.event_name == 'java-sandbox-scan' || inputs.event_name == 'unidentified-lang-pipeline-scan' || inputs.event_name == 'unidentified-lang-policy-scan' || inputs.event_name == 'unidentified-lang-sandbox-scan' }}
21+
if: ${{ inputs.event_name == 'java-pipeline-scan' || inputs.event_name == 'java-policy-scan' || inputs.event_name == 'java-sandbox-scan' || inputs.event_name == 'unidentified-lang-pipeline-scan' || inputs.event_name == 'unidentified-lang-policy-scan' || inputs.event_name == 'unidentified-lang-sandbox-scan' || inputs.event_name == 'dot-net-pipeline-scan' || inputs.event_name == 'dot-net-policy-scan' || inputs.event_name == 'dot-net-sandbox-scan'}}
2222
uses: ./.github/workflows/veracode-default-build.yml
2323
with:
2424
repository: ${{ inputs.repository }}
@@ -48,14 +48,6 @@ jobs:
4848
repository: ${{ inputs.repository }}
4949
ref: ${{ inputs.ref }}
5050
token: ${{ inputs.token }}
51-
52-
build-dot-net-package:
53-
if: ${{ inputs.event_name == 'dot-net-pipeline-scan' || inputs.event_name == 'dot-net-policy-scan' || inputs.event_name == 'dot-net-sandbox-scan'}}
54-
uses: ./.github/workflows/veracode-build-dot-net.yml
55-
with:
56-
repository: ${{ inputs.repository }}
57-
ref: ${{ inputs.ref }}
58-
token: ${{ inputs.token }}
5951

6052
build-go-package:
6153
if: ${{ inputs.event_name == 'go-pipeline-scan' || inputs.event_name == 'go-policy-scan' || inputs.event_name == 'go-sandbox-scan'}}

‎.github/workflows/veracode-code-analysis.yml

+8-8
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ concurrency:
88

99
on:
1010
repository_dispatch:
11-
types:
11+
types:
1212
- java-maven-pipeline-scan
1313
- java-maven-policy-scan
1414
- java-gradle-pipeline-scan
@@ -38,7 +38,7 @@ jobs:
3838
register:
3939
uses: ./.github/workflows/veracode-check-run.yml
4040
with:
41-
check_run_name: ${{ github.workflow }}
41+
check_run_name: ${{ github.workflow }} - ${{ contains(github.event.action, 'policy') && 'Policy' || 'Pipeline' }}
4242
head_sha: ${{ github.event.client_payload.sha }}
4343
repositroy_owner: ${{ github.event.client_payload.repository.owner }}
4444
repositroy_name: ${{ github.event.client_payload.repository.name }}
@@ -54,7 +54,7 @@ jobs:
5454
steps:
5555
- name: Verify Veracode API credentials
5656
id: verify_api_creds
57-
uses: veracode/[email protected].2
57+
uses: veracode/[email protected].3
5858
with:
5959
action: validateVeracodeApiCreds
6060
token: ${{ github.event.client_payload.token }}
@@ -63,11 +63,11 @@ jobs:
6363
appname: ${{ github.event.client_payload.user_config.profile_name }}
6464
source_repository: ${{ github.event.client_payload.repository.full_name }}
6565
check_run_id: ${{ needs.register.outputs.run_id }}
66-
66+
6767
- name: Verify Policy name
6868
id: verify_policy_name
6969
if: success()
70-
uses: veracode/[email protected].2
70+
uses: veracode/[email protected].3
7171
with:
7272
action: validatePolicyName
7373
token: ${{ github.event.client_payload.token }}
@@ -81,7 +81,7 @@ jobs:
8181
start_line: ${{ github.event.client_payload.annotationObj.start_line }}
8282
end_line: ${{ github.event.client_payload.annotationObj.end_line }}
8383
break_build_invalid_policy: ${{github.event.client_payload.break_build_invalid_policy }}
84-
84+
8585
build:
8686
needs: validations
8787
uses: ./.github/workflows/veracode-build-artifact-for-scanning.yml
@@ -114,7 +114,7 @@ jobs:
114114
filter_mitigated_flaws: ${{ github.event.client_payload.user_config.filter_mitigated_flaws }}
115115
language: ${{ github.event.client_payload.repository.language }}
116116
secrets: inherit
117-
117+
118118
policy_scan:
119119
needs: [build, register]
120120
if: contains(github.event.action, 'policy')
@@ -136,4 +136,4 @@ jobs:
136136
break_build_on_error: ${{ github.event.client_payload.user_config.break_build_on_error }}
137137
filter_mitigated_flaws: ${{ github.event.client_payload.user_config.filter_mitigated_flaws }}
138138
language: ${{ github.event.client_payload.repository.language }}
139-
secrets: inherit
139+
secrets: inherit

‎.github/workflows/veracode-default-build.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -54,5 +54,5 @@ jobs:
5454
- uses: actions/upload-artifact@v4
5555
with:
5656
name: veracode-artifact
57-
path: /__w/veracode/veracode/veracode-artifact.zip
57+
path: /__w/veracode/veracode/veracode-artifacts/*
5858
if-no-files-found: error

‎.github/workflows/veracode-iac-secrets-scan.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
steps:
3131
- name: Verify Veracode API credentials
3232
id: verify_api_creds
33-
uses: veracode/[email protected].2
33+
uses: veracode/[email protected].3
3434
with:
3535
action: validateVeracodeApiCreds
3636
token: ${{ github.event.client_payload.token }}

‎.github/workflows/veracode-pipeline-scan.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,7 @@ jobs:
8484
- name: Veracode Pipeline Results
8585
if: always()
8686
id: prepare-results
87-
uses: Veracode/[email protected].2
87+
uses: Veracode/[email protected].3
8888
with:
8989
action: 'preparePipelineResults'
9090
token: ${{ inputs.token }}

‎.github/workflows/veracode-policy-scan.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ jobs:
8888
- name: Veracode Policy Results
8989
id: prepare-results
9090
if: always()
91-
uses: Veracode/[email protected].2
91+
uses: Veracode/[email protected].3
9292
with:
9393
action: 'preparePolicyResults'
9494
token: ${{ inputs.token }}
@@ -107,7 +107,7 @@ jobs:
107107
if: ${{ github.event.client_payload.user_config.sandbox_scan.execute_remove_sandbox_action && always() }}
108108
name: Remove Sandbox
109109
steps:
110-
- uses: veracode/[email protected].2
110+
- uses: veracode/[email protected].3
111111
with:
112112
action: 'removeSandbox'
113113
vid: ${{ secrets.VERACODE_API_ID }}

‎.github/workflows/veracode-remove-sandbox.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
runs-on: ubuntu-latest
3535
name: Remove Sandbox
3636
steps:
37-
- uses: veracode/[email protected].2
37+
- uses: veracode/[email protected].3
3838
with:
3939
action: 'removeSandbox'
4040
vid: ${{ secrets.VERACODE_API_ID }}

‎.gitignore

+1
Original file line numberDiff line numberDiff line change
@@ -1 +1,2 @@
11
.DS_Store
2+
.idea

0 commit comments

Comments
 (0)