Skip to content

Latest commit

 

History

History
30 lines (20 loc) · 1.68 KB

README.md

File metadata and controls

30 lines (20 loc) · 1.68 KB

GitHub

Docker Cloud Build Status Docker Pulls

veracode-pipeline

Docker Image Version (tag latest semver)

Docker Image Size (latest by date)

Description:

This container image contains a version of the Veracode Pipeline Scanner. Configured to perform the actions available to the Veracode Pipeline Scanner in a secure way. All the actions available to the Veracode Pipeline Scanner can be perform by calling Pipeline and passing in the arguments as requied for the action. Pipeline is aliasing for java -jar /app/veracode-pipeline.jar command call.

The containter also now has environmental variable for VERACODE_ANALYSISCENTER_ID and VERACODE_ANALYSISCENTER_KEY to be passed instead of as arguments throug the command line.

Docker Examples

Example of retrieving the pipeline version

docker run --rm -e VERACODE_ANALYSISCENTER_ID=<veracode_id> -e VERACODE_ANALYSISCENTER_KEY=<veracode_key> dennismedeiros/veracode-pipeline:latest Pipeline -version

Example of running a SAST application scan while passing environmental variables

docker run --rm -v $(pwd)/target:/target -e VERACODE_ANALYSISCENTER_ID=<veracode_id> -e VERACODE_ANALYSISCENTER_KEY=<veracode_key> dennismedeiros/veracode-pipeline:latest Pipeline -f /target/verademo.war

GitLab Examples: