Skip to content

Commit

Permalink
Bump to veracode 1.0.17 and remove exclusions. Scan should fail
Browse files Browse the repository at this point in the history
  • Loading branch information
SaraAspery committed Jan 9, 2025
1 parent 5efac6d commit 35e1629
Show file tree
Hide file tree
Showing 3 changed files with 2 additions and 33 deletions.
10 changes: 2 additions & 8 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -85,16 +85,12 @@ jobs:
run: |
bash ./scripts/ci/init.sh
bash ./scripts/ci/build.sh
- name: "Remove excluded files"
run: |
mkdir temp-dir-for-sast
bash ./scripts/ci/remove-sast-exclusions.sh ./distribution/target/alfresco.war temp-dir-for-sast/reduced.war
- name: "Run SAST Scan"
uses: veracode/[email protected].16
uses: veracode/[email protected].17
with:
vid: '${{ secrets.VERACODE_API_ID }}'
vkey: '${{ secrets.VERACODE_API_KEY }}'
file: "temp-dir-for-sast/reduced.war"
file: "distribution/target/alfresco.war"
fail_build: true
project_name: acs-packaging-acs
issue_details: true
Expand All @@ -112,8 +108,6 @@ jobs:
with:
name: Veracode Pipeline-Scan Results - ACS (Human Readable)
path: readable_output.zip
- name: "Remove temporary directory"
run: rm -rfv temp-dir-for-sast
- name: "Clean Maven cache"
run: bash ./scripts/ci/cleanup_cache.sh

Expand Down
1 change: 0 additions & 1 deletion scripts/ci/SAST-exclusion-list.txt

This file was deleted.

24 changes: 0 additions & 24 deletions scripts/ci/remove-sast-exclusions.sh

This file was deleted.

0 comments on commit 35e1629

Please sign in to comment.