boxedlunch-us of MorphBorT
12/12/2019 - 3:41 PM

OWASP Dependency Check Pipeline Stage

sh(‘mkdir -p build/owasp’)
dependencycheck additionalArguments: '--project plastinforme --scan ./ --data /home/jenkins/security/owasp-nvd/ --out build/owasp/dependency-check-report.xml --format XML', odcInstallation: 'Dependency Checker'
stage("Dependency Check") {
    dependencyCheckAnalyzer datadir: 'dependency-check-data', isFailOnErrorDisabled: true, hintsFile: '', includeCsvReports: false, includeHtmlReports: false, includeJsonReports: false, isAutoupdateDisabled: false, outdir: '', scanpath: '', skipOnScmChange: false, skipOnUpstreamChange: false, suppressionFile: '', zipExtensions: ''

    dependencyCheckPublisher canComputeNew: false, defaultEncoding: '', healthy: '', pattern: '', unHealthy: ''

    archiveArtifacts allowEmptyArchive: true, artifacts: '**/dependency-check-report.xml', onlyIfSuccessful: true
}
pipeline {
  agent any
  stages {
    stage('Checkout') {
      steps {
        git credentialsId: 'stash', 
          url: '{{REPO_NAME}}'
      }   
    }
    /** Omitting some config steps **/
    stage('Build') {
      steps {
         sh 'mvn clean install'
      }
    }
    stage('Dependency Check') {
      steps {
          sh 'mvn org.owasp:dependency-check-maven:check
               -Dformat=XML -DdataDirectory=/usr/share/nvd -DautoUpdate=false'
          step([$class: 'DependencyCheckPublisher', unstableTotalAll: '0'])
        }
      }
    /** Omitting additional cleanup steps **/
  }
}