Breaking News: Grepper is joining You.com. Read the official announcement!

jenkins pipeline for sonarqube

Add Answer

Energetic Elephant answered on June 9, 2021 Popularity 9/10 Helpfulness 1/10

answer jenkins pipeline for sonarqube

related Jenkins-SonarQube

related jenkins sonarqube

jenkins pipeline for sonarqube

Comment

$ docker-compose up -d

Popularity 9/10 Helpfulness 1/10 Language shell

Source: medium.com

Tags: jenkins-pipeline shell sonarqube

Link to this answer
Share Copy Link

Contributed on Jun 09 2021

Energetic Elephant

0 Answers Avg Quality 2/10

Closely Related Answers

Jenkins-SonarQube

Comment

sudo yum update
sudo yum install vim wget curl unzip -y

Popularity 9/10 Helpfulness 1/10 Language shell

Source: computingforgeeks.com

Tags: shell shel

Link to this answer
Share Copy Link

Contributed on Mar 02 2022

NiFrA

0 Answers Avg Quality 2/10

jenkins sonarqube

Comment

pipeline {
  agent any

  stages {
    stage('Checkout Repository') {
      steps {
        git(branch: 'main', url: 'https://gitlab.com/restuwahyu13/node-helloworld')
      }
    }

    stage('Install Dependency') {
      steps {
        sh 'npm install'
      }
    }

    stage('Quality Control') {
      steps {
        sh '''#!/bin/bash
        test=$(npm test | awk '/passing/ {print $2}')

        if [[ "${test}" -ne 'passing' ]]; then
            exit 1
        else
            npm test
            npm run cov
        fi
        '''
      }
    }

    stage('Security Code Analysis') {
      steps {
        sh 'sonar-scanner -Dsonar.projectSettings=./sonar-project.properties'
      }
    }

    stage('Security Dir Analysis') {
        steps {
        sh '''#!/bin/bash
            types=('vuln' 'misconfig' 'license' 'secret')
            severity='LOW,MEDIUM,HIGH,CRITICAL'
            excludedDirs='node_modules/**,dist/**'
            excludedFiles='package*.json,**/*.{html,css,json,map}'
            
            for ((i = 0; i < "${#types[@]}"; i++)); do
              type="${types[$i]}"
              scan=$(trivy fs --no-progress --skip-files "$excludedFiles" --skip-dirs "$excludedDirs" --scanners "$type" --severity "$severity" --parallel 10 --exit-code 1 . | awk '/Failures:/ {print $2}')
            
              if [[ "$scan" -ne '' ]]; then
                trivy fs --skip-db-update --skip-files "$excludedFiles" --skip-dirs "$excludedDirs" --scanners "$type" --severity "$severity" --parallel 10 --exit-code 1 .
                echo "
                =================================
                    FS REPORT ANALYSIS
                =================================
                
                    $type no detected : 0
                
                =================================
                "
                sleep 3
                exit 1
              else
                echo "
                =================================
                    FS REPORT ANALYSIS
                =================================
                
                    $type no detected : 0
                
                =================================
                "
              fi
            done
          '''
        }
    }
  }
}

Popularity 6/10 Helpfulness 1/10 Language whatever

Source: Grepper

Tags: jenkins sonarqube whatever whateve

Link to this answer
Share Copy Link

Contributed on Jan 11 2024

Restu Wahyu Saputra

0 Answers Avg Quality 2/10

jenkins pipeline for sonarqube

Contents

More Related Answers

jenkins pipeline for sonarqube

Closely Related Answers

Jenkins-SonarQube

jenkins sonarqube

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.