Skip to content

Contrast SAST Scan

Contrast SAST Scan #8

Manually triggered April 4, 2024 19:24
Status Failure
Total duration 38s
Billable time 1m
Artifacts

contrast-sast-scan.yml

on: workflow_dispatch
Run Contrast SAST Scan
29s
Run Contrast SAST Scan
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 2 warnings
Run Contrast SAST Scan
Command failed: java -jar scanner.jar . --project-name test-project --label *** -r "IBM Developer Skills Network" Missing required environment variable: 'CONTRAST__API__URL' Usage: scan [-hqV] [-l=<label>] [--memory=<memory>] [-o=<outputResultsLocation>] [-p=<projectName>] [--project-id=<projectId>] [-r=<resourceGroup>] <file> Contrast Security Static Scanner <file> Location of file to scan -h, --help Show this help message and exit. -l, --label=<label> The label of the current scan --memory=<memory> Memory limit to use when executing the underlying engine jvm process e.g. 1024m, 2g. -o, --output-results=<outputResultsLocation> Specify the file to write the output results to (default: results.sarif) -p, --project-name=<projectName> The name of the project to be scanned --project-id=<projectId> The id of the project to be scanned -q, --code-quality Include code quality rules when scanning source code. (Not applicable for binary java scans) -r=<resourceGroup> The resource group to add a project to -V, --version Print version information and exit. Contrast API Environment Variables CONTRAST__API__URL Base URL for the Contrast Server API CONTRAST__API__USER_NAME Contrast API username CONTRAST__API__API_KEY Contrast API key CONTRAST__API__SERVICE_KEY Contrast API service key CONTRAST__API__ORGANIZATION Contrast API organization id CONTRAST__API__PROXY__ENABLE Use a proxy to communicate with the Contrast Server API CONTRAST__API__PROXY__URL The proxy server url (e.g. https://<host>:<port>) CONTRAST__API__PROXY__USERNAME The proxy server username CONTRAST__API__PROXY__PASSWORD The proxy server password CONTRAST__API__PROXY__TYPE The proxy server auth type (e.g. basic)
Run Contrast SAST Scan
Command failed: java -jar scanner.jar . --project-name test-project --label *** -r "IBM Developer Skills Network" Missing required environment variable: 'CONTRAST__API__URL' Usage: scan [-hqV] [-l=<label>] [--memory=<memory>] [-o=<outputResultsLocation>] [-p=<projectName>] [--project-id=<projectId>] [-r=<resourceGroup>] <file> Contrast Security Static Scanner <file> Location of file to scan -h, --help Show this help message and exit. -l, --label=<label> The label of the current scan --memory=<memory> Memory limit to use when executing the underlying engine jvm process e.g. 1024m, 2g. -o, --output-results=<outputResultsLocation> Specify the file to write the output results to (default: results.sarif) -p, --project-name=<projectName> The name of the project to be scanned --project-id=<projectId> The id of the project to be scanned -q, --code-quality Include code quality rules when scanning source code. (Not applicable for binary java scans) -r=<resourceGroup> The resource group to add a project to -V, --version Print version information and exit. Contrast API Environment Variables CONTRAST__API__URL Base URL for the Contrast Server API CONTRAST__API__USER_NAME Contrast API username CONTRAST__API__API_KEY Contrast API key CONTRAST__API__SERVICE_KEY Contrast API service key CONTRAST__API__ORGANIZATION Contrast API organization id CONTRAST__API__PROXY__ENABLE Use a proxy to communicate with the Contrast Server API CONTRAST__API__PROXY__URL The proxy server url (e.g. https://<host>:<port>) CONTRAST__API__PROXY__USERNAME The proxy server username CONTRAST__API__PROXY__PASSWORD The proxy server password CONTRAST__API__PROXY__TYPE The proxy server auth type (e.g. basic)
Run Contrast SAST Scan
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v2, actions/setup-java@v2. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
Run Contrast SAST Scan
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, actions/setup-java@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/