veracode.yaml

# Copyright (c) 2023 Robert Bosch Manufacturing Solutions GmbH
# Copyright (c) 2023 Contributors to the Eclipse Foundation

# See the NOTICE file(s) distributed with this work for additional
# information regarding copyright ownership.

# This program and the accompanying materials are made available under the
# terms of the Apache License, Version 2.0 which is available at
# https://www.apache.org/licenses/LICENSE-2.0.

# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.

# SPDX-License-Identifier: Apache-2.0
name: Veracode Scan

on:
  schedule:
    - cron: 0 2 * * 0
  workflow_dispatch:

jobs:
  veracode-scan-discovery-finder:
    runs-on: ubuntu-20.04
    permissions:
      actions: read
      contents: read
      security-events: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v2
        with:
          ref: release
      - name: setup-java
        uses: actions/setup-java@v3
        with:
          distribution: temurin
          java-version: 17
      - name: Build with maven
        run: |
          mvn clean package -DskipTests
          export DISCOVERY_FINDER_VERSION=$( mvn help:evaluate -Dexpression=project.version -q -DforceStdout )
          echo "DISCOVERY_FINDER_VERSION=$DISCOVERY_FINDER_VERSION" >> $GITHUB_ENV
      - name: Run Veracode Upload And Scan
        uses: veracode/veracode-uploadandscan-action@0.2.1
        with:
          # Specify Veracode application name
          appname: "Discovery Finder"
          createprofile: false
          filepath: "backend/target/discovery-finder-backend-${{ env.DISCOVERY_FINDER_VERSION }}.jar"
          vid: '${{ secrets.VERACODE_API_ID || secrets.ORG_VERACODE_API_ID }}'
          vkey: '${{ secrets.VERACODE_API_KEY || secrets.ORG_VERACODE_API_KEY }}'