Merge pull request 'OZG-4833 dependency track' (#74) from OZG-4833-use-dependency-track into dev

Reviewed-on: https://git.ozg-sh.de/ozgcloud-app/antragsraum-server/pulls/74

Jenkinsfile

@@ -184,20 +184,20 @@ pipeline {
             }	
         }
         
-        stage ('OWASP Dependency-Check Vulnerabilities') {
+        stage ('Deploy SBOM to DependencyTrack') {
             steps {
-                    dependencyCheck additionalArguments: ''' 
-                        -o "./" 
-                        -s "./"
-                        -f "ALL" 
-                        -d /dependency-check-data
-                        --suppression dependency-check-supressions.xml
-                        --noupdate
-                        --disableKnownExploited
-                        --disableArchive
-                        --prettyPrint''', odcInstallation: 'dependency-check-owasp'
-
-                    dependencyCheckPublisher pattern: 'dependency-check-report.xml'
+                script {
+                    IMAGE_TAG = generateImageTag()
+
+                    configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
+                        withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) {
+
+                            catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') {
+                                sh "mvn  --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=${IMAGE_TAG} -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de"
+                            }
+                        }
+                    }
+                }
             }
         }