Hi folks, wanted to let you know about some new community contributed scripts for working with Pipeline Scans -- one providing additional options with GitHub and one making it easier to create a baseline file based on approved mitigations in an application profile.

The scripts are here:

Pipeline-To-Issues: For people using GitHub but not using the security interface, this action translates Pipeline Scan results to issues on the GitHub project.

Veracode-Pipeline-Mitigation: Takes a JSON file of pipeline scan results and a pointer to an application profile, and constructs a baseline file based on approved mitigations in the application profile.

Do these scripts help you work with Pipeline Scan? Would you like to see more code samples like this? Let us know!