Create veracode-scan.sh

drajcan · Jan 16, 2023 · 011d100 · 011d100
1 parent 64afeaf
commit 011d100
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/veracode-scan.sh b/.github/veracode-scan.sh
@@ -0,0 +1,16 @@
+if [ -z "$1" ];
+then
+    echo "This script needs one argument, the zip file (including the path) that needs to be scan!"
+    exit 1
+fi
+
+if [ -d ~/Downloads/pipeline-scan-LATEST ];
+then
+    echo "Veracode pipeline scan tool available, skipping the installation process."
+else
+    echo "Veracode pipeline scan tool not available. Proceeding with the installation..." 
+    curl --show-error --fail -O --output-dir ~/Downloads https://downloads.veracode.com/securityscan/pipeline-scan-LATEST.zip
+    unzip -o ~/Downloads/pipeline-scan-LATEST.zip -d ~/Downloads/pipeline-scan-LATEST
+fi
+
+java -jar ~/Downloads/pipeline-scan-LATEST/pipeline-scan.jar --verbose true --veracode_api_id "$VERACODE_API_ID" --veracode_api_key "$VERACODE_API_KEY" --file $1