Cloudbees action: Scan with Nexus Lifecycle XC

Use this action to perform a SAST scan with Nexus Lifecycle XC, delivered via the Nexus IQ server. Nexus Lifecycle XC is a Sonatype product.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
server-url	String	Yes	The Nexus IQ server name.
username	String	Yes	The Sonatype username.
password	String	Yes	The Sonatype password.
org-id	String	Yes	The Sonatype Org ID.
language	String	No	The language of your Git repository code base. Refer to Supported languages.

Supported languages

Table 2. Supported languages with inputs

Supported language	Input format
Go	LANGUAGE_GO
Java	LANGUAGE_JAVA
JavaScript	LANGUAGE_JS
Maven	LANGUAGE_MAVEN
NodeJS	LANGUAGE_NODEJS
NPM	LANGUAGE_NPM
PHP	LANGUAGE_PHP
Python	LANGUAGE_PYTHON
Ruby	LANGUAGE_RUBY

Usage example

In your YAML file, add:

      - name: Scan with Nexus IQ server
        uses: cloudbees-io/nexusiq-sast-scan-code@v1
        with:
          server-url: ${{ vars.SONATYPE_SERVER_URL }}
          username: "sonatype_username"
          password: ${{ secrets.SONATYPE_PASSWORD }}
          token: ${{ secrets.SONATYPE_ORG_ID }}
          language: "LANGUAGE_JAVA"

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.