Configure your agent-based scanning Jenkins job
To complete this task:
-
In Jenkins, select the job you want to scan.
-
Select Configure.
-
Select Build Environment.
-
Select Use secret text(s) or file(s).
-
Under Bindings, select Add > Secret text.
-
For Variable, enter
SRCCLR_API_TOKEN
. -
Select SRCCLR_API_TOKEN.
-
In the build section, select Add build step > Execute shell.
You can include the shell as a pre- or post-build step.
-
Add this command to the shell command box:
curl -sSL https://download.sourceclear.com/ci.sh | sh
-
Save your build.
Results:
The next time your job runs, Veracode SCA performs an agent-based scan.