sh(‘mkdir -p build/owasp’)
dependencycheck additionalArguments: '--project plastinforme --scan ./ --data /home/jenkins/security/owasp-nvd/ --out build/owasp/dependency-check-report.xml --format XML', odcInstallation: 'Dependency Checker'
stage("Dependency Check") {
dependencyCheckAnalyzer datadir: 'dependency-check-data', isFailOnErrorDisabled: true, hintsFile: '', includeCsvReports: false, includeHtmlReports: false, includeJsonReports: false, isAutoupdateDisabled: false, outdir: '', scanpath: '', skipOnScmChange: false, skipOnUpstreamChange: false, suppressionFile: '', zipExtensions: ''
dependencyCheckPublisher canComputeNew: false, defaultEncoding: '', healthy: '', pattern: '', unHealthy: ''
archiveArtifacts allowEmptyArchive: true, artifacts: '**/dependency-check-report.xml', onlyIfSuccessful: true
}
pipeline {
agent any
stages {
stage('Checkout') {
steps {
git credentialsId: 'stash',
url: '{{REPO_NAME}}'
}
}
/** Omitting some config steps **/
stage('Build') {
steps {
sh 'mvn clean install'
}
}
stage('Dependency Check') {
steps {
sh 'mvn org.owasp:dependency-check-maven:check
-Dformat=XML -DdataDirectory=/usr/share/nvd -DautoUpdate=false'
step([$class: 'DependencyCheckPublisher', unstableTotalAll: '0'])
}
}
/** Omitting additional cleanup steps **/
}
}