Merge pull request 'OZG-4833 jenkins use dependency track' (#121) from...

Merge pull request 'OZG-4833 jenkins use dependency track' (#121) from OZG-4833-use-dependency-track into master

Reviewed-on: https://git.ozg-sh.de/ozgcloud-app/user-manager/pulls/121

Jenkinsfile

@@ -127,22 +127,22 @@ pipeline {
               }
         }
 
-        stage ('OWASP Dependency-Check Vulnerabilities') {
+        stage ('Deploy SBOM to DependencyTrack') {
             steps {
-                dependencyCheck additionalArguments: '''
-                        -o "./"
-                        -s "./"
-                        -f "ALL"
-                        -d /dependency-check-data
-                        --suppression dependency-check-supressions.xml
-                        --disableKnownExploited
-                        --noupdate
-                        --disableArchive
-                        --prettyPrint''', odcInstallation: 'dependency-check-owasp'
+                configFileProvider([configFile(fileId: 'maven-settings', variable: 'MAVEN_SETTINGS')]) {
+                    withCredentials([string(credentialsId: 'dependency-track-api-key', variable: 'API_KEY')]) {
+
+                        dir('user-manager-server') {
 
-                dependencyCheckPublisher pattern: 'dependency-check-report.xml'
+                            catchError(buildResult: 'UNSTABLE', stageResult: 'FAILURE') {
+                                sh 'mvn  --no-transfer-progress -s $MAVEN_SETTINGS io.github.pmckeown:dependency-track-maven-plugin:upload-bom -Ddependency-track.apiKey=$API_KEY -Ddependency-track.projectVersion=' + generateImageTag() + ' -Ddependency-track.dependencyTrackBaseUrl=https://dependency-track.ozg-sh.de'
+                            }
                         }
                     }
+                }
+            }
+        }
+
 
         stage('Sonar Checks') {
             when {