diff --git a/Jenkinsfile b/Jenkinsfile index 0a977a99219e60000cd7edf140f517e1462d2b0b..88c96aadef10dd2536ce3e61c84ea65b87fed549 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -175,20 +175,18 @@ pipeline { } } - stage ('OWASP Dependency-Check Vulnerabilities') { + stage ('Deploy SBOM to DependencyTrack') { steps { - dependencyCheck additionalArguments: ''' - -o "./" - -s "./" - -f "ALL" - -d /dependency-check-data - --suppression dependency-check-supressions.xml - --noupdate - --disableKnownExploited - --disableArchive - --prettyPrint''', odcInstallation: 'dependency-check-owasp' - - dependencyCheckPublisher pattern: 'dependency-check-report.xml' + configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) { + withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) { + + dir('bayernid-proxy-impl') { + catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') { + sh 'mvn --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=' + generateImageTag('pom.xml') + ' -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de' + } + } + } + } } }