Veracode React Sample App #82

	# Copyright (c) Laserfiche.
	# Licensed under the MIT License. See LICENSE in the project root for license information.

	name: Veracode React Sample App

	on:
	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:
	schedule:
	- cron: '0 12 * * 6'

	jobs:
	build:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v3
	with:
	ref: ${{ github.sha }}

	- name: 'Delete spec files'
	run: find . -type f -name '*.spec.ts' -delete

	- name: 'Delete reportWebVitals files'
	run: find . -type f -name 'reportWebVitals.ts' -delete

	- name: 'Delete type files'
	run: find . -type f -name '*.d.ts' -delete

	- name: 'create an empty ./veracode folder'
	run: 'mkdir -p ./veracode'

	- name: 'Compress react-sample-app'
	run: tar -czvf ./veracode/react-sample-app.tar.gz ./src

	- name: Veracode Upload And Scan (Static Application Security Testing)
	uses: veracode/[email protected]
	with:
	appname: 'lf-sample-OAuth-SPA-react'
	createprofile: true
	filepath: 'veracode'
	vid: '${{ secrets.VERACODE_API_ID }}'
	vkey: '${{ secrets.VERACODE_API_KEY }}'

	- name: Run Veracode Software Composition Analysis (SCA)
	env:
	SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}
	uses: veracode/[email protected]
	with:
	create-issues: false
	allow-dirty: true
	recursive: true

Provide feedback