2_of_every_animal (Community Member) asked a question.
"Gating" Merges using Veracode Github Actions
Hi All!
Is it possible to stop merges if a vulnerability is found during code scanning while using GitHub actions whenever a PR is made? Right now our team has scans running on each PR but we were wondering if it was possible that if a vulnerability of lets say Medium or higher was found it would block the current PR from being merged until the vulnerability is fixed. Is this possible to do in veracode via GitHub actions or any other method available? Hopefully this explanation makes sense, I have tried to search around and have not found a concrete answer. Thanks!
.png){kind=logo}
You can use the pipeline scan in your scan to block merges if it finds issues by severity.
https://docs.veracode.com/r/c_about_pipeline_scan
I would setup some login in your yaml or other build scripts to have a "bypass scan" feature if the finding is a false positive. Of course, your dev team should be using greenlight or pipeline scanner before pushing any code into the repo.