CloudBees action: Scan with Mend SAST

1 minute read

Use this action to scan a Git repository with the Mend static application security testing (SAST) scanner, which detects security flaws and provides suggested code fixes.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name Data type Required? Description

server-url

String

Yes

The Mend server URL.

token

String

Yes

The Mend client secret.

language

String

No

The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs
Supported language Input format

Go

LANGUAGE_GO

Java

LANGUAGE_JAVA

JavaScript

LANGUAGE_JS

Python

LANGUAGE_Python

Usage example

In your YAML file, add:

      - name: Scan with Mend SAST
        uses: cloudbees-io/mend-sast-scan-code@v1
        with:
          server-url: ${{ vars.MEND_SERVER_URL }}
          token: ${{ secrets.MEND_SECRET }}
          language: "LANGUAGE_PYTHON"