Contrast SAST Scan #8
contrast-sast-scan.yml
on: workflow_dispatch
Run Contrast SAST Scan
29s
Annotations
2 errors and 2 warnings
Run Contrast SAST Scan
Command failed: java -jar scanner.jar . --project-name test-project --label *** -r "IBM Developer Skills Network"
Missing required environment variable: 'CONTRAST__API__URL'
Usage: scan [-hqV] [-l=<label>] [--memory=<memory>]
[-o=<outputResultsLocation>] [-p=<projectName>]
[--project-id=<projectId>] [-r=<resourceGroup>] <file>
Contrast Security Static Scanner
<file> Location of file to scan
-h, --help Show this help message and exit.
-l, --label=<label> The label of the current scan
--memory=<memory> Memory limit to use when executing the underlying
engine jvm process e.g. 1024m, 2g.
-o, --output-results=<outputResultsLocation>
Specify the file to write the output results to
(default: results.sarif)
-p, --project-name=<projectName>
The name of the project to be scanned
--project-id=<projectId>
The id of the project to be scanned
-q, --code-quality Include code quality rules when scanning source code.
(Not applicable for binary java scans)
-r=<resourceGroup> The resource group to add a project to
-V, --version Print version information and exit.
Contrast API Environment Variables
CONTRAST__API__URL Base URL for the Contrast Server
API
CONTRAST__API__USER_NAME Contrast API username
CONTRAST__API__API_KEY Contrast API key
CONTRAST__API__SERVICE_KEY Contrast API service key
CONTRAST__API__ORGANIZATION Contrast API organization id
CONTRAST__API__PROXY__ENABLE Use a proxy to communicate with
the Contrast Server API
CONTRAST__API__PROXY__URL The proxy server url
(e.g. https://<host>:<port>)
CONTRAST__API__PROXY__USERNAME The proxy server username
CONTRAST__API__PROXY__PASSWORD The proxy server password
CONTRAST__API__PROXY__TYPE The proxy server auth type
(e.g. basic)
|
Run Contrast SAST Scan
Command failed: java -jar scanner.jar . --project-name test-project --label *** -r "IBM Developer Skills Network"
Missing required environment variable: 'CONTRAST__API__URL'
Usage: scan [-hqV] [-l=<label>] [--memory=<memory>]
[-o=<outputResultsLocation>] [-p=<projectName>]
[--project-id=<projectId>] [-r=<resourceGroup>] <file>
Contrast Security Static Scanner
<file> Location of file to scan
-h, --help Show this help message and exit.
-l, --label=<label> The label of the current scan
--memory=<memory> Memory limit to use when executing the underlying
engine jvm process e.g. 1024m, 2g.
-o, --output-results=<outputResultsLocation>
Specify the file to write the output results to
(default: results.sarif)
-p, --project-name=<projectName>
The name of the project to be scanned
--project-id=<projectId>
The id of the project to be scanned
-q, --code-quality Include code quality rules when scanning source code.
(Not applicable for binary java scans)
-r=<resourceGroup> The resource group to add a project to
-V, --version Print version information and exit.
Contrast API Environment Variables
CONTRAST__API__URL Base URL for the Contrast Server
API
CONTRAST__API__USER_NAME Contrast API username
CONTRAST__API__API_KEY Contrast API key
CONTRAST__API__SERVICE_KEY Contrast API service key
CONTRAST__API__ORGANIZATION Contrast API organization id
CONTRAST__API__PROXY__ENABLE Use a proxy to communicate with
the Contrast Server API
CONTRAST__API__PROXY__URL The proxy server url
(e.g. https://<host>:<port>)
CONTRAST__API__PROXY__USERNAME The proxy server username
CONTRAST__API__PROXY__PASSWORD The proxy server password
CONTRAST__API__PROXY__TYPE The proxy server auth type
(e.g. basic)
|
Run Contrast SAST Scan
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v2, actions/setup-java@v2. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
Run Contrast SAST Scan
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, actions/setup-java@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|