diff --git a/Jenkinsfile b/Jenkinsfile index c92e0527f745ab07743a0be786bcc5a32323313e..58b40263ea851e3781adf47bc5e2ae9eaf4f27d4 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -127,23 +127,23 @@ pipeline { } } - stage ('OWASP Dependency-Check Vulnerabilities') { + stage ('Deploy SBOM to DependencyTrack') { steps { - dependencyCheck additionalArguments: ''' - -o "./" - -s "./" - -f "ALL" - -d /dependency-check-data - --suppression dependency-check-supressions.xml - --disableKnownExploited - --noupdate - --disableArchive - --prettyPrint''', odcInstallation: 'dependency-check-owasp' - - dependencyCheckPublisher pattern: 'dependency-check-report.xml' + configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) { + withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) { + + dir('user-manager-server') { + + catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') { + sh 'mvn --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=' + generateImageTag() + ' -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de' + } + } + } + } } } + stage('Sonar Checks') { when { branch 'master'