CloudBees action: Scan with Mend SAST

Use this action to scan a Git repository with the Mend static application security testing (SAST) scanner, which detects security flaws and provides suggested code fixes.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name	Data type	Required?	Description
`server-url`	String	Yes	The Mend server URL.
`token`	String	Yes	The Mend client secret.
`language`	String	No	The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs
Supported language	Input format
Go	`LANGUAGE_GO`
Java	`LANGUAGE_JAVA`
JavaScript	`LANGUAGE_JS`
Python	`LANGUAGE_Python`

Usage example

In your YAML file, add:

      - name: Scan with Mend SAST
        uses: cloudbees-io/mend-sast-scan-code@v1
        with:
          server-url: ${{ vars.MEND_SERVER_URL }}
          token: ${{ secrets.MEND_SECRET }}
          language: "LANGUAGE_PYTHON"▼