mablanco/veracode-pipeline-scan repository overview

⁠veracode-pipeline-scan

Docker image for Veracode's Pipeline Scan, a tool to evaluate the security of your application directly within a development pipeline (https://help.veracode.com/reader/tS9CaFwL4_lbIEWWomsJoA/ovfZGgu96UINQxIuTqRDwg⁠).

This image is built upon my Docker image for AdoptOpenJDK 8, as Veracode's Pipeline Scan needs an older JVM version than those that most modern Linux distros can provide.

⁠How to use this image

⁠Show help

$ docker run --rm mablanco/veracode-pipeline-scan

⁠Show version

$ docker run --rm mablanco/veracode-pipeline-scan java -jar pipeline-scan.jar -v

⁠Check a file

$ docker run --rm -v <folder_to_scan>:/app/src mablanco/veracode-pipeline-scan java -jar pipeline-scan.jar -f src/<file>