diff --git a/Jenkinsfile b/Jenkinsfile index 149c1623c482c0b3974baaf0ca4240763c32d6f9..23b0ac4285e3a1ce5f5a7a73b611935193a937c1 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -91,6 +91,23 @@ pipeline { } } + stage ('Deploy SBOM to DependencyTrack') { + steps { + script { + IMAGE_TAG = "${env.BRANCH_NAME}-${getPomVersion('pom.xml')}" + + configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) { + withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) { + + catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') { + sh "mvn --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=${IMAGE_TAG} -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de" + } + } + } + } + } + } + stage('Sonar Checks') { when { branch 'master'