CloudBees action: Scan with Nexus Lifecycle XC

Use this action to perform a SAST scan with Nexus Lifecycle XC, delivered via the Nexus IQ server. Nexus Lifecycle XC is a Sonatype product.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name	Data type	Required?	Description
`server-url`	String	Yes	The Nexus IQ server name.
`username`	String	Yes	The Sonatype username.
`password`	String	Yes	The Sonatype password.
`token`	String	Yes	The Sonatype token.
`language`	String	No	The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs
Supported language	Input format
Go	`LANGUAGE_GO`
Java	`LANGUAGE_JAVA`
JavaScript	`LANGUAGE_JS`
Maven	`LANGUAGE_MAVEN`
NodeJS	`LANGUAGE_NODEJS`
NPM	`LANGUAGE_NPM`
PHP	`LANGUAGE_PHP`
Python	`LANGUAGE_PYTHON`
Ruby	`LANGUAGE_RUBY`

Usage example

In your YAML file, add:

      - name: Scan with Nexus IQ server
        uses: https://github.com/cloudbees-io/nexusiq-sast-scan-code@v1
        with:
          server-url: ${{ vars.SONATYPE_SERVER_URL }}
          username: "sonatype_username"
          password: ${{ secrets.SONATYPE_PASSWORD }}
          token: ${{ secrets.SONATYPE_TOKEN }}
          language: "LANGUAGE_JAVA"▼