Skip to content
Snippets Groups Projects
Commit a73125d2 authored by OZGCloud's avatar OZGCloud
Browse files

Merge pull request 'OZG-4833 dependency track' (#163) from...

Merge pull request 'OZG-4833 dependency track' (#163) from OZG-4833-use-dependency-track into master

Reviewed-on: https://git.ozg-sh.de/ozgcloud-app/eingang-manager/pulls/163
parents fb364fb6 efe1b144
No related branches found
No related tags found
No related merge requests found
......@@ -213,23 +213,24 @@ pipeline {
}
}
stage ('OWASP Dependency-Check Vulnerabilities') {
stage ('Deploy SBOM to DependencyTrack') {
steps {
dependencyCheck additionalArguments: '''
-o "./"
-s "./"
-f "ALL"
-d /dependency-check-data
--suppression dependency-check-supressions.xml
--disableKnownExploited
--noupdate
--disableArchive
--prettyPrint''', odcInstallation: 'dependency-check-owasp'
script {
IMAGE_TAG = generateImageTag()
dependencyCheckPublisher pattern: 'dependency-check-report.xml'
configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) {
catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') {
sh "mvn --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=${IMAGE_TAG} -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de"
}
}
}
}
}
}
}
post {
failure {
script {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment