forked from snyk-labs/java-goof
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathJenkinsfile
More file actions
61 lines (57 loc) · 1.31 KB
/
Jenkinsfile
File metadata and controls
61 lines (57 loc) · 1.31 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
pipeline {
agent any
tools {
maven 'Maven'
}
stages {
stage('Initialize') {
steps {
sh '''
echo "PATH = ${PATH}"
echo "M2_HOME = ${M2_HOME}"
'''
}
}
stage('Check-Git-Secrets') {
steps {
sh 'rm trufflehog || true'
sh 'docker run gesellix/trufflehog --json https://github.com/testytest-cicd/JavaApp.git > trufflehog'
sh 'cat trufflehog'
}
}
stage('Source Composition Analysis') {
steps {
sh 'rm owasp* || true'
sh 'wget "https://raw.githubusercontent.com/testytest-cicd/JavaApp/master/owasp-dependency-check.sh" '
sh 'chmod +x owasp-dependency-check.sh'
sh 'bash owasp-dependency-check.sh --retireJsUrl'
sh 'cat /var/lib/jenkins/OWASP-Dependency-Check/reports/dependency-check-report.xml'
}
}
stage('SAST') {
steps {
withSonarQubeEnv('sonar') {
sh 'mvn clean install sonar:sonar'
sh 'cat target/sonar/report-task.txt'
}
}
}
stage('Build') {
steps {
sh 'mvn clean package'
}
}
stage('Deploy-To-Tomcat') {
steps {
sshagent(['tomcat']) {
sh 'exit 0'
}
}
}
stage('DAST') {
steps {
sh 'docker run -t owasp/zap2docker-stable zap-baseline.py -t http://161.35.71.25:3000/#/'
}
}
}
}