Cloudbees action: Scan with Nexus Lifecycle XC

1 minute read

Use this action to perform a SAST scan with Nexus Lifecycle XC, delivered via the Nexus IQ server. Nexus Lifecycle XC is a Sonatype product.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name Data type Required? Description

server-url

String

Yes

The Nexus IQ server name.

username

String

Yes

The Sonatype username.

password

String

Yes

The Sonatype password.

token

String

Yes

The Sonatype token.

language

String

No

The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs
Supported language Input format

Go

LANGUAGE_GO

Java

LANGUAGE_JAVA

JavaScript

LANGUAGE_JS

Maven

LANGUAGE_MAVEN

NodeJS

LANGUAGE_NODEJS

NPM

LANGUAGE_NPM

PHP

LANGUAGE_PHP

Python

LANGUAGE_PYTHON

Ruby

LANGUAGE_RUBY

Usage example

In your YAML file, add:

      - name: Scan with Nexus IQ server
        uses: cloudbees-io/nexusiq-sast-scan-code@v1
        with:
          server-url: ${{ vars.SONATYPE_SERVER_URL }}
          username: "sonatype_username"
          password: ${{ secrets.SONATYPE_PASSWORD }}
          token: ${{ secrets.SONATYPE_TOKEN }}
          language: "LANGUAGE_JAVA"