CloudBees action: Scan with Sonatype (Nexus) Container

1 minute read

Use this action to scan with the Sonatype (previously known as Nexus) Container scanner, which identifies code vulnerabilities and compliance issues.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name Data type Required? Description

server-url

String

Yes

The Sonatype server URL.

username

String

Yes

The Sonatype username.

password

String

Yes

The Sonatype password.

token

String

Yes

The Sonatype token.

image-location

String

Yes

The container image location.

image-tag

String

Yes

The container image tag.

Usage example

In your YAML file, add:

      - name: Scan with Sonatype Container
        uses: cloudbees-io/nexusiq-scan-container@v1
        with:
          username: "sonatype_username"
          password: ${{ secrets.SONATYPE_PASSWORD }}
          token: ${{ secrets.SONATYPE_TOKEN }}
          image-location: ${{ vars.SONATYPE_ASSET_IDENTIFIER }}
          image-tag: ${{ vars.SONATYPE_PROFILE_IDENTIFIER }}