Skip to content

dennismedeiros/veracode-pipeline

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

GitHub

Docker Cloud Build Status Docker Pulls

veracode-pipeline

Docker Image Version (tag latest semver)

Docker Image Size (latest by date)

Description:

This container image contains a version of the Veracode Pipeline Scanner. Configured to perform the actions available to the Veracode Pipeline Scanner in a secure way. All the actions available to the Veracode Pipeline Scanner can be perform by calling Pipeline and passing in the arguments as requied for the action. Pipeline is aliasing for java -jar /app/veracode-pipeline.jar command call.

The containter also now has environmental variable for VERACODE_ANALYSISCENTER_ID and VERACODE_ANALYSISCENTER_KEY to be passed instead of as arguments throug the command line.

Docker Examples

Example of retrieving the pipeline version

docker run --rm -e VERACODE_ANALYSISCENTER_ID=<veracode_id> -e VERACODE_ANALYSISCENTER_KEY=<veracode_key> dennismedeiros/veracode-pipeline:latest Pipeline -version

Example of running a SAST application scan while passing environmental variables

docker run --rm -v $(pwd)/target:/target -e VERACODE_ANALYSISCENTER_ID=<veracode_id> -e VERACODE_ANALYSISCENTER_KEY=<veracode_key> dennismedeiros/veracode-pipeline:latest Pipeline -f /target/verademo.war

GitLab Examples:

Releases

No releases published

Packages

No packages published