diff --git a/Jenkinsfile b/Jenkinsfile index 49a567e6f225e89c4c5f139ca830028dc9bc64cd..67fd380521ce9b8b15ef4f093668ad9084130711 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -89,6 +89,22 @@ pipeline { } } + stage ('OWASP Dependency-Check Vulnerabilities') { + steps { + dependencyCheck additionalArguments: ''' + -o "./" + -s "./" + -f "ALL" + -d /dependency-check-data + --suppression dependency-check-supressions.xml + --disableKnownExploited + --disableArchive + --prettyPrint''', odcInstallation: 'dependency-check-owasp' + + dependencyCheckPublisher pattern: 'dependency-check-report.xml' + } + } + stage('Sonar Checks') { when { branch 'master' diff --git a/dependency-check-supressions.xml b/dependency-check-supressions.xml new file mode 100644 index 0000000000000000000000000000000000000000..880fe0f371d78abb14bbb675302987dbeb19ec81 --- /dev/null +++ b/dependency-check-supressions.xml @@ -0,0 +1,6 @@ +<?xml version="1.0" encoding="UTF-8"?> +<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"> + <suppress> + <vulnerabilityName>CVE-DUMMY</vulnerabilityName> + </suppress> +</suppressions> \ No newline at end of file