CloudBees action: Scan with Sonatype (Nexus) Container

Use this action to scan with the Sonatype (previously known as Nexus) Container scanner, which identifies code vulnerabilities and compliance issues.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name	Data type	Required?	Description
`server-url`	String	Yes	The Sonatype server URL.
`username`	String	Yes	The Sonatype username.
`password`	String	Yes	The Sonatype password.
`token`	String	Yes	The Sonatype token.
`image-location`	String	Yes	The container image location.
`image-tag`	String	Yes	The container image tag.

Usage example

In your YAML file, add:

      - name: Scan with Sonatype Container
        uses: https://github.com/cloudbees-io/nexusiq-scan-container@v1
        with:
          username: "sonatype_username"
          password: ${{ secrets.SONATYPE_PASSWORD }}
          token: ${{ secrets.SONATYPE_TOKEN }}
          image-location: ${{ vars.SONATYPE_ASSET_IDENTIFIER }}
          image-tag: ${{ vars.SONATYPE_PROFILE_IDENTIFIER }}▼