Skip to content
Snippets Groups Projects
Commit 38d4f376 authored by OZGCloud's avatar OZGCloud
Browse files

OZG-4833 dependency track

parent d19e3f38
Branches
Tags
No related merge requests found
...@@ -106,20 +106,22 @@ pipeline { ...@@ -106,20 +106,22 @@ pipeline {
} }
} }
stage ('OWASP Dependency-Check Vulnerabilities') { stage ('Deploy SBOM to DependencyTrack') {
steps { steps {
dependencyCheck additionalArguments: ''' script {
-o "./" IMAGE_TAG = generateImageTag()
-s "./"
-f "ALL" configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
-d /dependency-check-data withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) {
--suppression dependency-check-supressions.xml
--disableKnownExploited dir('vorgang-manager-server') {
--noupdate catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') {
--disableArchive sh "mvn --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=${IMAGE_TAG} -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de"
--prettyPrint''', odcInstallation: 'dependency-check-owasp' }
}
dependencyCheckPublisher pattern: 'dependency-check-report.xml' }
}
}
} }
} }
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment