forked from cehkunal/webapp
-
Notifications
You must be signed in to change notification settings - Fork 8
/
Jenkinsfile
126 lines (125 loc) · 3.75 KB
/
Jenkinsfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
pipeline {
agent any
tools {
maven 'Maven'
}
stages {
stage ("Initialize") {
steps {
sh'''
echo "PATH = ${PATH}"
echo "M2_HOME = ${M2_HOME}"
'''
}
}
// stage ('Trufflehog-Secret-Check') {
// steps {
// sh 'rm trufflehog_output.txt || true'
// sh 'docker run gesellix/trufflehog --json https://github.com/siddkhewal007/webapp.git > trufflehog_output.txt'
// sh 'cat trufflehog_output.txt'
// }
// }
stage ('Sonar-Qube') {
steps {
withSonarQubeEnv('Sonar') {
sh 'mvn sonar:sonar'
}
}
}
stage ('Build') {
steps {
sh 'mvn clean package'
}
}
stage ('Deploy-To-Tomcat') {
steps {
sshagent(['tomcat']) {
sh 'scp -o StrictHostKeyChecking=no target/*.war ubuntu@54.75.208.116:/opt/tomcat/apache-tomcat-9.0.65/webapps/webapp.war'
}
}
}
stage ('DAST') {
steps {
sshagent(['tomcat']) {
sh 'ssh -o StrictHostKeyChecking=no ubuntu@54.75.208.116 "docker run -t owasp/zap2docker-stable zap-baseline.py -t http://54.75.208.116:8080/webapp/" || true'
}
}
}
}
}
// stage ('Trufflehog') {
// steps {
// sh 'rm trufflehog || true'
// sh 'docker run gesellix/trufflehog --json https://github.com/siddkhewal007/webapp.git >trufflehog'
// sh 'cat trufflehog'
// }
// }
// stage ('Sonar-Qube') {
// steps {
// withSonarQubeEnv('Sonar') {
// sh 'mvn sonar:sonar'
// }
// }
// }
// stage ('SCA') {
// steps {
// sh 'chmod +x owasp-dependency-check.sh'
// sh 'sh owasp-dependency-check.sh'
// }
// }
// stage ('DAST') {
// steps {
// sshagent(['Tomcat']) {
// sh 'ssh -o StrictHostKeyChecking=no ubuntu@34.243.165.5 "docker run -t owasp/zap2docker-stable zap-baseline.py -t http://34.243.165.5:8080/webapp/" || true'
// }
// }
// }
// stage ('Source Composition Analysis') {
// steps {
// sh 'rm owasp* || true'
// sh 'wget "https://raw.githubusercontent.com/cehkunal/webapp/master/owasp-dependency-check.sh" '
// sh 'chmod +x owasp-dependency-check.sh'
// sh 'bash owasp-dependency-check.sh'
// sh 'cat /var/lib/jenkins/OWASP-Dependency-Check/reports/dependency-check-report.xml'
//
// }
// }
// stages {
// stage ('Initialize') {
// steps {
// sh '''
// echo "PATH = ${PATH}"
// echo "M2_HOME = ${M2_HOME}"
// '''
// }
// }
// stage ('Source Composition Analysis') {
// steps {
// sh 'rm owasp* || true'
// sh 'wget "https://raw.githubusercontent.com/cehkunal/webapp/master/owasp-dependency-check.sh" '
// sh 'chmod +x owasp-dependency-check.sh'
// sh 'bash owasp-dependency-check.sh'
// sh 'cat /var/lib/jenkins/OWASP-Dependency-Check/reports/dependency-check-report.xml'
// }
// }
// stage ('Build') {
// steps {
// sh 'mvn clean package'
// }
// }
// stage ('Deploy-To-Tomcat') {
// steps {
// sshagent(['Tomcat']) {
// sh 'scp -o StrictHostKeyChecking=no target/*.war skamal@52.152.217.58:/home/skamal/tomcat/webapps/webapp.war'
// }
// }
// }
// stage ('DAST') {
// steps {
// sshagent(['Tomcat']) {
// sh 'ssh -o StrictHostKeyChecking=no skamal@52.142.11.68 "docker run -t owasp/zap2docker-stable zap-baseline.py -t http://52.152.217.58:8080/webapp/" || true'
// }
// }
// }
// }
// }