lucas.ferreira likes this.
  • hello @SGaonkar159020 (Community Member)​ 

     

    You can use the api wrappers or docker images to do that

     

     

    1. Its recommend that you generate your API keys and store them into a Env Variables for: VERACODE_API_ID_KEY ; VERACODE_API_KEY_SECRET and SRCCLR_API_TOKEN
    2. Then, you can open the configuration to run a script (shell) which you: download and run upload and scan:

     

    Upload and Scan

     - curl -L -o VeracodeJavaAPI.jar https://repo1.maven.org/maven2/com/veracode/vosp/api/wrappers/vosp-api-wrappers-java/23.4.11.2/vosp-api-wrappers-java-23.4.11.2.jar

    - java -jar VeracodeJavaAPI.jar -vid $VERACODE_API_ID_KEY -vkey $VERACODE_API_KEY_SECRET -action uploadandscan -appname "appname" -createprofile true -filepath your_app_packaged -version $(date +%Y-%m-%d-%H:%M)

     

    Pipeline Scan

    - curl -sSO https://downloads.veracode.com/securityscan/pipeline-scan-LATEST.zip

       - unzip -o pipeline-scan-LATEST.zip

       - java -jar pipeline-scan.jar -vid $VERACODE_API_ID_KEY -vkey $VERACODE_API_KEY_SECRET -f your_app_packaged

     

    SCA agent based scan

    - curl -sSL https://download.sourceclear.com/ci.sh | bash -s – scan

    Expand Post
  • infycletechnologies (Community Member)

    Certainly! To add a stage for static analysis using AWS CDK in your AWS CodePipeline, follow these general steps:

    • Create a CodeBuild Project for Static Analysis:
    • Add the Static Analysis Stage to your CodePipeline:
    • Adjust Role Permissions:
    • Deploy the CDK Stack:

    Now, when your CodePipeline runs, it will include a stage for static analysis using the CodeBuild project you defined in the CDK stack. Adjust the build specifications and commands based on the specific static analysis tools you intend to use in your project. Infycle Technologies' AWS Training in Chennai can help you advance your profession. Discover the power of Amazon Web Services (AWS) and gain expertise in cloud computing

     

    Expand Post

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.