NNarlawar349527 (Community Member) asked a question.

Can we break the Travis-CI build (which includes SCA scanning of Code+Docker containers), on the basis of the result of the Veracode SCA agent scan?

I created the sample project and integrate it with Travis-CI. To integrate my project to Travis-CI and apply the SCA Agent base scanning I did below: 

  • In .travis.yml:
    • Include srcclr:true
    • Add the SRCCLR_API_TOKEN in the Travis-CI setting.

After including the above, I am able to scan my code as well as the docker images during my Travis build. So when we run the Travis build we get the output on a console like below:

```

Security

 

With Vulnerable Methods 0

 

High Risk Vulnerabilities 0

 

Medium Risk Vulnerabilities 3

 

Low Risk Vulnerabilities 0

```

Many other details are printed as well, but I'm wondering as to how I may break my Travis-CI build based on any of the above factors. For example, if the number of High-Risk Vulnerabilities is greater than 2, I want to break the build. Is it possible to handle anything like that?

 


Topics (7)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.