From 58d7c2d28c332be697019676f51bb56999465551 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Wed, 17 Jun 2020 15:42:35 -0400 Subject: [PATCH 01/43] Create coverity.yml --- .github/workflows/coverity.yml | 41 ++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 .github/workflows/coverity.yml diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml new file mode 100644 index 00000000..36b20a8a --- /dev/null +++ b/.github/workflows/coverity.yml @@ -0,0 +1,41 @@ + +name: Run Coverity On Polaris +on: [push] + +jobs: + synopsys_coverity: + name: Synopsys Coverity + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v1 + - uses: actions/setup-node@v1 + - name: Download Coverity Analysis Engine + run: | + curl http://52.188.212.142:8080/downloadFile.htm?fn=cov-analysis-linux64-2020.06.tar.gz -o cov-analysis-linux64-2020.06.tar.gz -LO -u admin:SIGpass8! + tar -xf cov-analysis-linux64-2020.06.tar.gz + curl http://52.188.212.142:8080/downloadFile.htm?fn=analysis-license.dat -o license.dat -LO -u admin:SIGpass8! + mv license.dat ./cov-analysis-linux64-2020.06/bin + + - name: npm install + run: npm install + + - name: Cov-Build + run: | + ./cov-analysis-linux64-2020.06/bin/cov-configure --javascript + ./cov-analysis-linux64-2020.06/bin/cov-build --dir idir --no-command --fs-capture-search . + + - name: Cov-Analyze + run: | + ./cov-analysis-linux64-2020.06/bin/cov-analyze --dir idir --webapp-security + + + #- name: npm install + # run: npm install + + #- name: Synopsys Detect Action + +# uses: blackducksoftware/github-action@1.0.1 + # env: + # BLACKDUCK_URL: ${{ secrets.BLACKDUCK_URL}} + # BLACKDUCK_API_TOKEN: ${{ secrets.BLACKDUCK_API_TOKEN}} From b068a08a2fde9549d3c938ec8a4698c1f4d0cce0 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Wed, 17 Jun 2020 15:55:46 -0400 Subject: [PATCH 02/43] use mvn build capture --- .github/workflows/coverity.yml | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml index 36b20a8a..0e5baec0 100644 --- a/.github/workflows/coverity.yml +++ b/.github/workflows/coverity.yml @@ -9,21 +9,24 @@ jobs: steps: - uses: actions/checkout@v1 - - uses: actions/setup-node@v1 + - name: Set up JDK 1.8 + uses: actions/setup-java@v1 + with: + java-version: 1.8 + #- name: Build with Maven + # run: mvn -B package --file pom.xml + - name: Download Coverity Analysis Engine run: | curl http://52.188.212.142:8080/downloadFile.htm?fn=cov-analysis-linux64-2020.06.tar.gz -o cov-analysis-linux64-2020.06.tar.gz -LO -u admin:SIGpass8! tar -xf cov-analysis-linux64-2020.06.tar.gz curl http://52.188.212.142:8080/downloadFile.htm?fn=analysis-license.dat -o license.dat -LO -u admin:SIGpass8! mv license.dat ./cov-analysis-linux64-2020.06/bin - - - name: npm install - run: npm install - name: Cov-Build run: | - ./cov-analysis-linux64-2020.06/bin/cov-configure --javascript - ./cov-analysis-linux64-2020.06/bin/cov-build --dir idir --no-command --fs-capture-search . + ./cov-analysis-linux64-2020.06/bin/cov-configure --java + ./cov-analysis-linux64-2020.06/bin/cov-build --dir idir mvn install - name: Cov-Analyze run: | From d14d52379d590d7b2bdc462be7ce44a8aad8bd3f Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Wed, 17 Jun 2020 16:27:27 -0400 Subject: [PATCH 03/43] try self-hosted --- .github/workflows/coverity.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml index 0e5baec0..e42147a3 100644 --- a/.github/workflows/coverity.yml +++ b/.github/workflows/coverity.yml @@ -5,7 +5,8 @@ on: [push] jobs: synopsys_coverity: name: Synopsys Coverity - runs-on: ubuntu-latest + #runs-on: ubuntu-latest + runs-on: self-hosted steps: - uses: actions/checkout@v1 From a5738a15e9bedae17b9d1fd215cf707f5058f992 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Thu, 18 Jun 2020 09:28:12 -0400 Subject: [PATCH 04/43] disable hosted --- .github/workflows/coverity.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml index e42147a3..42d170ee 100644 --- a/.github/workflows/coverity.yml +++ b/.github/workflows/coverity.yml @@ -1,6 +1,6 @@ name: Run Coverity On Polaris -on: [push] +on: [release] jobs: synopsys_coverity: From a466e0e1b7aa0a512eee4e1ab369307e4d1f6699 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Thu, 18 Jun 2020 09:33:59 -0400 Subject: [PATCH 05/43] Create Coverity-self-hosted.yml --- .github/workflows/Coverity-self-hosted.yml | 32 ++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/Coverity-self-hosted.yml diff --git a/.github/workflows/Coverity-self-hosted.yml b/.github/workflows/Coverity-self-hosted.yml new file mode 100644 index 00000000..e0317565 --- /dev/null +++ b/.github/workflows/Coverity-self-hosted.yml @@ -0,0 +1,32 @@ + +name: Run Coverity on Self-Hosted Agent +on: [push] + +jobs: + synopsys_coverity: + name: Synopsys Coverity + #runs-on: ubuntu-latest + runs-on: self-hosted + + steps: + - uses: actions/checkout@v1 + - name: Set up JDK 1.8 + uses: actions/setup-java@v1 + with: + java-version: 1.8 + #- name: Build with Maven + # run: mvn -B package --file pom.xml + + - name: Cov-Build + run: | + cov-configure -c cov-config\cov-config.xml --java + cov-configure -c cov-config\cov-config.xml --javascript + cov-build --dir idir -c cov-config\cov-config.xml --fs-capture-search . --no-security-da mvn install -DskipTests + + - name: Cov-Analyze + run: | + cov-analyze --dir idir --webapp-security --disable-fb --export-summaries false + + - name: Cov-Commit-Defects + run: | + cov-commit-defects --dir idir --host 52.188.212.142 --stream java-sec-code --user admin --password SIGpass8! From 47197ae9ec7039c0b7ef1b694078bda2a9e5db26 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Thu, 18 Jun 2020 13:52:11 -0400 Subject: [PATCH 06/43] include summaries - java build capture only --- .github/workflows/Coverity-self-hosted.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted.yml b/.github/workflows/Coverity-self-hosted.yml index e0317565..5e59c3f9 100644 --- a/.github/workflows/Coverity-self-hosted.yml +++ b/.github/workflows/Coverity-self-hosted.yml @@ -20,12 +20,13 @@ jobs: - name: Cov-Build run: | cov-configure -c cov-config\cov-config.xml --java - cov-configure -c cov-config\cov-config.xml --javascript - cov-build --dir idir -c cov-config\cov-config.xml --fs-capture-search . --no-security-da mvn install -DskipTests - + + cov-build --dir idir -c cov-config\cov-config.xml --no-security-da mvn install -DskipTests + # cov-configure -c cov-config\cov-config.xml --javascript - name: Cov-Analyze run: | - cov-analyze --dir idir --webapp-security --disable-fb --export-summaries false + cov-analyze --dir idir --webapp-security --disable-fb + # --export-summaries false - name: Cov-Commit-Defects run: | From 1b1b3d8c0929a63b3a30449cea8c589a4a9e3c32 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 11:28:26 -0400 Subject: [PATCH 07/43] testing for incremental --- .../Coverity-self-hosted-Incremental.yml | 39 +++++++++++++++++++ .github/workflows/Coverity-self-hosted.yml | 2 +- 2 files changed, 40 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/Coverity-self-hosted-Incremental.yml diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml new file mode 100644 index 00000000..093bf968 --- /dev/null +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -0,0 +1,39 @@ + +name: Run Coverity on Self-Hosted Agent +on: [push] + +jobs: + synopsys_coverity: + name: Synopsys Coverity + #runs-on: ubuntu-latest + runs-on: self-hosted + + steps: + - uses: actions/checkout@v1 + - name: Set up JDK 1.8 + uses: actions/setup-java@v1 + with: + java-version: 1.8 + #- name: Build with Maven + # run: mvn -B package --file pom.xml + + - name: Get Changed File List + run: | + echo Getting files for changeset SHA: $GITHUB_SHA + git show $GITHUB_SHA --name-only --pretty="" + + + # - name: Cov-Build + # run: | + # cov-configure -c cov-config\cov-config.xml --java + + # cov-build --dir idir -c cov-config\cov-config.xml --no-security-da mvn install -DskipTests + # # cov-configure -c cov-config\cov-config.xml --javascript + # - name: Cov-Analyze + # run: | + # cov-analyze --dir idir --webapp-security --disable-fb + # # --export-summaries false + + # - name: Cov-Commit-Defects + # run: | + # cov-commit-defects --dir idir --host 52.188.212.142 --stream java-sec-code --user admin --password SIGpass8! diff --git a/.github/workflows/Coverity-self-hosted.yml b/.github/workflows/Coverity-self-hosted.yml index 5e59c3f9..0731bbdd 100644 --- a/.github/workflows/Coverity-self-hosted.yml +++ b/.github/workflows/Coverity-self-hosted.yml @@ -1,6 +1,6 @@ name: Run Coverity on Self-Hosted Agent -on: [push] +on: [release] jobs: synopsys_coverity: From bfc42f3caff24b184cc0e097d4e86d49ab48b7d9 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 12:57:52 -0400 Subject: [PATCH 08/43] add incremental config file --- coverity.conf | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 coverity.conf diff --git a/coverity.conf b/coverity.conf new file mode 100644 index 00000000..5ed6e614 --- /dev/null +++ b/coverity.conf @@ -0,0 +1,14 @@ + { + "type": "Coverity configuration", + "format_version": 1, + "settings": { + "server": { + "host": "52.188.212.142" // CC host name + }, + "stream": "java-sec-code", // CC stream name + "cov_run_desktop": { + "build_cmd": ["mvn.cmd", "install", "-DskipTests"], // build command + "clean_cmd": ["mvn.cmd", "clean"] // clean command + } + } + } \ No newline at end of file From 6883bf45a4c26118bb062796e0268da5e9fe6c41 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 13:08:07 -0400 Subject: [PATCH 09/43] enable incremental with --analyze-scm-modified --- .../Coverity-self-hosted-Incremental.yml | 20 +++++++++---------- .gitignore | 5 ++++- 2 files changed, 13 insertions(+), 12 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 093bf968..6def4416 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -1,5 +1,5 @@ -name: Run Coverity on Self-Hosted Agent +name: Run Coverity on Self-Hosted Agent INCREMENTAL on: [push] jobs: @@ -23,16 +23,14 @@ jobs: git show $GITHUB_SHA --name-only --pretty="" - # - name: Cov-Build - # run: | - # cov-configure -c cov-config\cov-config.xml --java - - # cov-build --dir idir -c cov-config\cov-config.xml --no-security-da mvn install -DskipTests - # # cov-configure -c cov-config\cov-config.xml --javascript - # - name: Cov-Analyze - # run: | - # cov-analyze --dir idir --webapp-security --disable-fb - # # --export-summaries false + - name: Cov-Build + run: | + cov-run-desktop --setup --user admin --password SIGpass8! + + - name: Cov-Analyze + run: | + cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git --analyze-scm-modified + # - name: Cov-Commit-Defects # run: | diff --git a/.gitignore b/.gitignore index 2b8dab5d..a77bf335 100644 --- a/.gitignore +++ b/.gitignore @@ -6,4 +6,7 @@ docker/ poc/ src/main/java/org/joychou/test/ *.iml -docker_jdk_build.sh \ No newline at end of file +docker_jdk_build.sh +data-coverity +.synopsys +idir \ No newline at end of file From 4da8d6ae36e47134328572c56421ff25adee652e Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 13:09:33 -0400 Subject: [PATCH 10/43] fix yml error --- .github/workflows/Coverity-self-hosted-Incremental.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 6def4416..79f8652c 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -22,9 +22,8 @@ jobs: echo Getting files for changeset SHA: $GITHUB_SHA git show $GITHUB_SHA --name-only --pretty="" - - - name: Cov-Build - run: | + - name: Cov-Build + run: | cov-run-desktop --setup --user admin --password SIGpass8! - name: Cov-Analyze From 955876b4510aa8795fb37e555df4b19502a6f790 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 13:10:22 -0400 Subject: [PATCH 11/43] fix yml error 2 --- .github/workflows/Coverity-self-hosted-Incremental.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 79f8652c..547b0b71 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -26,8 +26,8 @@ jobs: run: | cov-run-desktop --setup --user admin --password SIGpass8! - - name: Cov-Analyze - run: | + - name: Cov-Analyze + run: | cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git --analyze-scm-modified From 23d8ab5fae5ee5de61cd02aabf76ac1a6dd6fd75 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 13:13:14 -0400 Subject: [PATCH 12/43] use mvn instead of mvn.cmd --- coverity.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/coverity.conf b/coverity.conf index 5ed6e614..5b0fe019 100644 --- a/coverity.conf +++ b/coverity.conf @@ -7,8 +7,8 @@ }, "stream": "java-sec-code", // CC stream name "cov_run_desktop": { - "build_cmd": ["mvn.cmd", "install", "-DskipTests"], // build command - "clean_cmd": ["mvn.cmd", "clean"] // clean command + "build_cmd": ["mvn", "install", "-DskipTests"], // build command + "clean_cmd": ["mvn", "clean"] // clean command } } } \ No newline at end of file From 048c539c4fcc43707f3751f4b54751a8e03ead14 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:26:03 -0400 Subject: [PATCH 13/43] use checkout v2 --- .github/workflows/Coverity-self-hosted-Incremental.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 547b0b71..40210675 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@v2 - name: Set up JDK 1.8 uses: actions/setup-java@v1 with: @@ -22,11 +22,11 @@ jobs: echo Getting files for changeset SHA: $GITHUB_SHA git show $GITHUB_SHA --name-only --pretty="" - - name: Cov-Build + - name: C-R-D Setup run: | cov-run-desktop --setup --user admin --password SIGpass8! - - name: Cov-Analyze + - name: Run Incremental Analysis run: | cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git --analyze-scm-modified From 250c84e0035c60db6b6a9d219919d045afef5153 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:27:57 -0400 Subject: [PATCH 14/43] use checkout v2 --- .github/workflows/Coverity-self-hosted-Incremental.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 40210675..4aadfb50 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -17,10 +17,10 @@ jobs: #- name: Build with Maven # run: mvn -B package --file pom.xml - - name: Get Changed File List - run: | - echo Getting files for changeset SHA: $GITHUB_SHA - git show $GITHUB_SHA --name-only --pretty="" + # - name: Get Changed File List + # run: | + # echo Getting files for changeset SHA: $GITHUB_SHA + # git show $GITHUB_SHA --name-only --pretty="" - name: C-R-D Setup run: | From 9dade53a6d421805f0b98dd304bffb2e5ba911b4 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:40:45 -0400 Subject: [PATCH 15/43] changes --- .github/workflows/Coverity-self-hosted-Incremental.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 4aadfb50..6e2df468 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v1 - name: Set up JDK 1.8 uses: actions/setup-java@v1 with: @@ -17,6 +17,11 @@ jobs: #- name: Build with Maven # run: mvn -B package --file pom.xml + - run: ls + - run: | + cd java-sec-code + ls + # - name: Get Changed File List # run: | # echo Getting files for changeset SHA: $GITHUB_SHA From 86c88af1e1c14de9920d98ed336083d6c5df817e Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:42:59 -0400 Subject: [PATCH 16/43] changes --- .github/workflows/Coverity-self-hosted-Incremental.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 6e2df468..d20b821e 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -17,10 +17,10 @@ jobs: #- name: Build with Maven # run: mvn -B package --file pom.xml - - run: ls + - run: ls -a - run: | cd java-sec-code - ls + ls -a # - name: Get Changed File List # run: | From c152f832c8c23b30bb51eda7163cf642ead0c270 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:43:48 -0400 Subject: [PATCH 17/43] changes --- .github/workflows/Coverity-self-hosted-Incremental.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index d20b821e..21598030 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@v2 - name: Set up JDK 1.8 uses: actions/setup-java@v1 with: From 11fdf58dc8668bf1b22347fcc29010521a803d31 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:47:14 -0400 Subject: [PATCH 18/43] changes --- .github/workflows/Coverity-self-hosted-Incremental.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 21598030..bc2c2290 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -10,6 +10,9 @@ jobs: steps: - uses: actions/checkout@v2 + with: + fetch-depth: '0' + - name: Set up JDK 1.8 uses: actions/setup-java@v1 with: @@ -17,7 +20,9 @@ jobs: #- name: Build with Maven # run: mvn -B package --file pom.xml - - run: ls -a + - run: | + pwd + ls -a - run: | cd java-sec-code ls -a From 3683c55435a22987713a4ec93f20422621a4fb57 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 14:48:29 -0400 Subject: [PATCH 19/43] changes --- .github/workflows/Coverity-self-hosted-Incremental.yml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index bc2c2290..ae838cae 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -12,7 +12,7 @@ jobs: - uses: actions/checkout@v2 with: fetch-depth: '0' - + - name: Set up JDK 1.8 uses: actions/setup-java@v1 with: @@ -23,9 +23,6 @@ jobs: - run: | pwd ls -a - - run: | - cd java-sec-code - ls -a # - name: Get Changed File List # run: | From 54de318fd0e77516a6e278475825ddf4a003a6a6 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 15:09:37 -0400 Subject: [PATCH 20/43] use checkout v1 --- .github/workflows/Coverity-self-hosted-Incremental.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index ae838cae..3d1c9196 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v1 with: fetch-depth: '0' From bad97721e00a7187e190f40d508fa1b8f91cf845 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 15:19:08 -0400 Subject: [PATCH 21/43] use checkout v2, after ugprading self-hosted agent --- .github/workflows/Coverity-self-hosted-Incremental.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 3d1c9196..ae838cae 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@v2 with: fetch-depth: '0' From 5244a3825b8a3aedaa40cc3f8d1328262b2daed5 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 15:35:26 -0400 Subject: [PATCH 22/43] back to v1 --- .github/workflows/Coverity-self-hosted-Incremental.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index ae838cae..3d1c9196 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v1 with: fetch-depth: '0' From 8080e999c6b05ef7f92de0f32623cecf6fce4e94 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 15:36:56 -0400 Subject: [PATCH 23/43] back to v2 --- .github/workflows/Coverity-self-hosted-Incremental.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 3d1c9196..ae838cae 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -9,7 +9,7 @@ jobs: runs-on: self-hosted steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@v2 with: fetch-depth: '0' From 01e570975bf5c88dae41a67ba72ea5de6e949bba Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 15:40:56 -0400 Subject: [PATCH 24/43] edit java file --- .gitignore | 6 +++++- src/main/java/org/joychou/security/SecurityUtil.java | 2 +- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index a77bf335..18d35c78 100644 --- a/.gitignore +++ b/.gitignore @@ -9,4 +9,8 @@ src/main/java/org/joychou/test/ docker_jdk_build.sh data-coverity .synopsys -idir \ No newline at end of file +idir +.classpath +.factorypath +.project +.settings \ No newline at end of file diff --git a/src/main/java/org/joychou/security/SecurityUtil.java b/src/main/java/org/joychou/security/SecurityUtil.java index ee962846..e6c1de56 100644 --- a/src/main/java/org/joychou/security/SecurityUtil.java +++ b/src/main/java/org/joychou/security/SecurityUtil.java @@ -14,7 +14,7 @@ import java.util.ArrayList; import java.util.regex.Pattern; - +//sean comment!! public class SecurityUtil { private static final Pattern FILTER_PATTERN = Pattern.compile("^[a-zA-Z0-9_/\\.-]+$"); From 6ef46470bd259496c5b3c4d7af4c1aac18fb1a8a Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 15:58:01 -0400 Subject: [PATCH 25/43] get filenames test --- .../Coverity-self-hosted-Incremental.yml | 25 ++++++++++++------- 1 file changed, 16 insertions(+), 9 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index ae838cae..be282b1b 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -24,18 +24,25 @@ jobs: pwd ls -a - # - name: Get Changed File List - # run: | - # echo Getting files for changeset SHA: $GITHUB_SHA - # git show $GITHUB_SHA --name-only --pretty="" + - name: Get Changed File List + run: | + echo Getting files for changeset SHA: $GITHUB_SHA + git show $GITHUB_SHA --name-only --pretty="" + git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' ' + export FILES=git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' ' + echo "::set-env name=FILES_TO_ANALYZE::$FILES" - - name: C-R-D Setup + - name: variable test run: | - cov-run-desktop --setup --user admin --password SIGpass8! + echo $FILES_TO_ANALYZE + + # - name: C-R-D Setup + # run: | + # cov-run-desktop --setup --user admin --password SIGpass8! - - name: Run Incremental Analysis - run: | - cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git --analyze-scm-modified + # - name: Run Incremental Analysis + # run: | + # cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git --analyze-scm-modified # - name: Cov-Commit-Defects From 44d00449a94b921e4e712040040f64e1aded98b1 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 16:50:37 -0400 Subject: [PATCH 26/43] get filenames test --- .github/workflows/Coverity-self-hosted-Incremental.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index be282b1b..a02925ed 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -29,7 +29,7 @@ jobs: echo Getting files for changeset SHA: $GITHUB_SHA git show $GITHUB_SHA --name-only --pretty="" git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' ' - export FILES=git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' ' + export FILES=`git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' '` echo "::set-env name=FILES_TO_ANALYZE::$FILES" - name: variable test From 795e95a7c9907a64c0f5c1f5c4439368ff83bafb Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 16:52:34 -0400 Subject: [PATCH 27/43] get filenames test --- .github/workflows/Coverity-self-hosted-Incremental.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index a02925ed..035ec73b 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -30,6 +30,7 @@ jobs: git show $GITHUB_SHA --name-only --pretty="" git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' ' export FILES=`git show $GITHUB_SHA --name-only --pretty="" |tr '\n' ' '` + echo File List==$FILES echo "::set-env name=FILES_TO_ANALYZE::$FILES" - name: variable test From 5bae05df7322f49e2351965b3e9160de435557c6 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Mon, 22 Jun 2020 16:56:02 -0400 Subject: [PATCH 28/43] send filenames, edit java --- .../workflows/Coverity-self-hosted-Incremental.yml | 12 ++++++------ src/main/java/org/joychou/security/SecurityUtil.java | 1 + 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/.github/workflows/Coverity-self-hosted-Incremental.yml b/.github/workflows/Coverity-self-hosted-Incremental.yml index 035ec73b..d67387be 100644 --- a/.github/workflows/Coverity-self-hosted-Incremental.yml +++ b/.github/workflows/Coverity-self-hosted-Incremental.yml @@ -37,13 +37,13 @@ jobs: run: | echo $FILES_TO_ANALYZE - # - name: C-R-D Setup - # run: | - # cov-run-desktop --setup --user admin --password SIGpass8! + - name: C-R-D Setup + run: | + cov-run-desktop --setup --user admin --password SIGpass8! - # - name: Run Incremental Analysis - # run: | - # cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git --analyze-scm-modified + - name: Run Incremental Analysis + run: | + cov-run-desktop --webapp-security --reference-snapshot latest --ignore-uncapturable-inputs true --scm git $FILES_TO_ANALYZE # - name: Cov-Commit-Defects diff --git a/src/main/java/org/joychou/security/SecurityUtil.java b/src/main/java/org/joychou/security/SecurityUtil.java index e6c1de56..b565ede1 100644 --- a/src/main/java/org/joychou/security/SecurityUtil.java +++ b/src/main/java/org/joychou/security/SecurityUtil.java @@ -15,6 +15,7 @@ import java.util.regex.Pattern; //sean comment!! +// second edit. public class SecurityUtil { private static final Pattern FILTER_PATTERN = Pattern.compile("^[a-zA-Z0-9_/\\.-]+$"); From d60edc7172e19bf81a9cea98c35e62d3d7337562 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Fri, 10 Jul 2020 14:48:06 -0400 Subject: [PATCH 29/43] jenkins file testing --- jenkinsfile | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 jenkinsfile diff --git a/jenkinsfile b/jenkinsfile new file mode 100644 index 00000000..eb524c60 --- /dev/null +++ b/jenkinsfile @@ -0,0 +1,32 @@ +pipeline { + agent any + stages { + + stage('Get Latest Code') { + steps { + checkout scm + } + } + + stage('Synopsys Black Duck') { + steps { + dir('insecurebank'){ + script { + echo 'Files that were changed in last commit: ' + sh 'git show --name-only --oneline' + echo 'Starting script...' + + def status = sh(returnStatus: true, script:'bash /var/lib/jenkins/workspace/BlackDuckScript/script.sh') + if (status == 0) { + echo 'Script passed, starting other activities...' + } + + if (status != 0) { + echo 'Files where changed, starting Black Duck Scan...' + } + } + } + } + } + } +} From 592ff48a6b1c0fb1b3ff6b9d04961a5d3381ba4f Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Fri, 10 Jul 2020 15:13:55 -0400 Subject: [PATCH 30/43] jenkins file testing v2 --- jenkinsfile | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/jenkinsfile b/jenkinsfile index eb524c60..09264f68 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -10,20 +10,20 @@ pipeline { stage('Synopsys Black Duck') { steps { - dir('insecurebank'){ - script { - echo 'Files that were changed in last commit: ' - sh 'git show --name-only --oneline' - echo 'Starting script...' - - def status = sh(returnStatus: true, script:'bash /var/lib/jenkins/workspace/BlackDuckScript/script.sh') - if (status == 0) { - echo 'Script passed, starting other activities...' - } - - if (status != 0) { - echo 'Files where changed, starting Black Duck Scan...' - } + script { + sh 'pwd' + sh 'ls -all' + echo 'Files that were changed in last commit: ' + sh 'git show --name-only --oneline' + echo 'Starting script...' + + def status = sh(returnStatus: true, script:'bash /var/lib/jenkins/workspace/BlackDuckScript/script.sh') + if (status == 0) { + echo 'Script passed, starting other activities...' + } + + if (status != 0) { + echo 'Files where changed, starting Black Duck Scan...' } } } From 889b1c69dbe89387ebf1c8c265b9de4125dc5449 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Fri, 10 Jul 2020 15:29:28 -0400 Subject: [PATCH 31/43] jenkinsfile final version --- BlackDuckFilesChanged.sh | 57 ++++++++++++++++++++++++++++++++++++++++ jenkinsfile | 19 +++++++------- 2 files changed, 67 insertions(+), 9 deletions(-) create mode 100644 BlackDuckFilesChanged.sh diff --git a/BlackDuckFilesChanged.sh b/BlackDuckFilesChanged.sh new file mode 100644 index 00000000..165ca8e2 --- /dev/null +++ b/BlackDuckFilesChanged.sh @@ -0,0 +1,57 @@ +#!/bin/bash + +# Create arr with file extensions to trigger Black Duck scan + +arr=( +"compile_commands.json" +"Podfile.lock" +"environment.yml" +"Makefile.PL" +"packrat.lock" +"Gopkg.lock" +"gogradle.lock" +"go.mod" +"vendor/vendor.json" +"vendor.conf" +"build.gradle" +"build.gradle.kts" +"rebar.config" +"pom.xml" +"pom.groovy" +"package.json" +"package-lock.json" +"npm-shrinkwrap.json" +"composer.lock" +"composer.json" +"package.xml" +"Pipfile.lock" +"setup.py" +"Gemfile.lock" +"build.sbt" +"Package.swift" +"yarn.lock") + +# Get files changed from git project + +OUTPUT=($(git show --name-only --oneline)) + +echo "Looking for changed files in" $(pwd) + +# Check to see if any of the changed files should trigger a Black Duck scan + +for i in "${OUTPUT[@]}" +do + for j in "${arr[@]}" + do + if [[ "$j" =~ "$i" ]]; then + echo "$i was changed, Black Duck scan should run" + exit 1 + fi + done + +done + +# Check each element in array + +echo "No files which trigger Black Duck SCA have been found." +exit 0 \ No newline at end of file diff --git a/jenkinsfile b/jenkinsfile index 09264f68..cdfaf788 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -11,20 +11,21 @@ pipeline { stage('Synopsys Black Duck') { steps { script { - sh 'pwd' - sh 'ls -all' echo 'Files that were changed in last commit: ' sh 'git show --name-only --oneline' - echo 'Starting script...' - def status = sh(returnStatus: true, script:'bash /var/lib/jenkins/workspace/BlackDuckScript/script.sh') - if (status == 0) { - echo 'Script passed, starting other activities...' - } - if (status != 0) { - echo 'Files where changed, starting Black Duck Scan...' + def status = sh(returnStatus: true, script:'bash BlackDuckFilesChanged.sh') + if (status == 1) { + echo 'Starting Black Duck Scan ...' + + // ToDo: Add Detect call here + // + } + else { + echo 'No Changes, Black Duck scan skipped' } + } } } From 9acab5a71ff22f46a34cb9c9af152b68e7060d4a Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Fri, 10 Jul 2020 15:38:52 -0400 Subject: [PATCH 32/43] added new dependency --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 6e5c2455..af4f970a 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ war - 1.8 + 1.8 1.8 From d104d9179db6bd873be9d5ab9ad2a770ff9212a4 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Fri, 10 Jul 2020 15:51:30 -0400 Subject: [PATCH 33/43] run detect --- jenkinsfile | 1 + pom.xml | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/jenkinsfile b/jenkinsfile index cdfaf788..d207c5df 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -21,6 +21,7 @@ pipeline { // ToDo: Add Detect call here // + synopsys_detect '--detect.tools=DETECTOR --detect.project.name=SPM-${JOB_NAME} --detect.project.version.name=${GIT_BRANCH}' } else { echo 'No Changes, Black Duck scan skipped' diff --git a/pom.xml b/pom.xml index af4f970a..744cd32d 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ war - 1.8 + 1.8 1.8 From bf699279bbfc10fc499bbbd1bfd64a4b448bd2c7 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Tue, 14 Jul 2020 11:09:05 -0400 Subject: [PATCH 34/43] test mvn --- jenkinsfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/jenkinsfile b/jenkinsfile index d207c5df..305cfd7f 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -14,6 +14,9 @@ pipeline { echo 'Files that were changed in last commit: ' sh 'git show --name-only --oneline' + echo '******** Testing MVN ***********' + sh 'which mvn' + sh 'mvn' def status = sh(returnStatus: true, script:'bash BlackDuckFilesChanged.sh') if (status == 1) { From 42b48eac244c6a3aafb98d14b297d1374dda441b Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Tue, 14 Jul 2020 11:15:25 -0400 Subject: [PATCH 35/43] test mvn 2 --- jenkinsfile | 1 + 1 file changed, 1 insertion(+) diff --git a/jenkinsfile b/jenkinsfile index 305cfd7f..4c3949c9 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -15,6 +15,7 @@ pipeline { sh 'git show --name-only --oneline' echo '******** Testing MVN ***********' + sh 'locate mvn' sh 'which mvn' sh 'mvn' From 46dbb5da81607501f5c6035b59e2e7231ca5a091 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Tue, 14 Jul 2020 11:21:34 -0400 Subject: [PATCH 36/43] add mvn tool section --- jenkinsfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/jenkinsfile b/jenkinsfile index 4c3949c9..f2459f8a 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -1,5 +1,8 @@ pipeline { agent any + tools { + maven 'maven 3.6.3' + } stages { stage('Get Latest Code') { From a50da970f70f10971b316b0a6289a1db4eb09d97 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Tue, 14 Jul 2020 11:31:36 -0400 Subject: [PATCH 37/43] remove mvn test, its working --- jenkinsfile | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/jenkinsfile b/jenkinsfile index f2459f8a..68cc810d 100644 --- a/jenkinsfile +++ b/jenkinsfile @@ -16,12 +16,7 @@ pipeline { script { echo 'Files that were changed in last commit: ' sh 'git show --name-only --oneline' - - echo '******** Testing MVN ***********' - sh 'locate mvn' - sh 'which mvn' - sh 'mvn' - + def status = sh(returnStatus: true, script:'bash BlackDuckFilesChanged.sh') if (status == 1) { echo 'Starting Black Duck Scan ...' From abc4f3b725a74704c1cc3569c6272ac53e14036b Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Tue, 14 Jul 2020 11:36:32 -0400 Subject: [PATCH 38/43] edit pom.xml --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 744cd32d..85a4cceb 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ war - 1.8 + 1.8 1.8 From b04d2ae1afb3303b945e5beb7b1c527f00024952 Mon Sep 17 00:00:00 2001 From: Sean McKenna Date: Tue, 14 Jul 2020 12:00:02 -0400 Subject: [PATCH 39/43] edit pom xml in master --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 85a4cceb..9ada208f 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ war - 1.8 + 1.8 1.8 From ecdd9985e2a02ca643eaafa288bff2e9573e7a97 Mon Sep 17 00:00:00 2001 From: sean mckenna Date: Mon, 1 Nov 2021 09:11:35 -0400 Subject: [PATCH 40/43] copy jenkinsfile --- jenkinsfile-BD | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 jenkinsfile-BD diff --git a/jenkinsfile-BD b/jenkinsfile-BD new file mode 100644 index 00000000..610b2b08 --- /dev/null +++ b/jenkinsfile-BD @@ -0,0 +1,26 @@ +pipeline { + agent any + tools { + maven 'maven 3.6.3' + } + stages { + + stage('Get Latest Code') { + steps { + checkout scm + } + } + + stage('Synopsys Black Duck') { + steps { + script { + + // ToDo: Add Detect call here + // + synopsys_detect '--detect.tools=DETECTOR --detect.project.name=SPM-${JOB_NAME} --detect.project.version.name=${GIT_BRANCH}' + + } + } + } + } +} From 22d1561e47595856912280abb8683696ce4088dd Mon Sep 17 00:00:00 2001 From: sean mckenna Date: Mon, 1 Nov 2021 09:36:20 -0400 Subject: [PATCH 41/43] change mvn --- jenkinsfile-BD | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/jenkinsfile-BD b/jenkinsfile-BD index 610b2b08..a988f880 100644 --- a/jenkinsfile-BD +++ b/jenkinsfile-BD @@ -1,7 +1,8 @@ pipeline { agent any tools { - maven 'maven 3.6.3' + //maven 'maven 3.6.3' + maven 'Apache Maven' } stages { From 1ae945fbc8e18e93c5793ec95cc1361a536c1265 Mon Sep 17 00:00:00 2001 From: sean mckenna Date: Mon, 1 Nov 2021 09:59:33 -0400 Subject: [PATCH 42/43] add mvn build step --- jenkinsfile-BD | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/jenkinsfile-BD b/jenkinsfile-BD index a988f880..d07c28e2 100644 --- a/jenkinsfile-BD +++ b/jenkinsfile-BD @@ -12,6 +12,12 @@ pipeline { } } + stage('Build') { + steps { + sh 'mvn -DskipTests=true build' + } + } + stage('Synopsys Black Duck') { steps { script { From 0671a078179b7f8fc00af274e830187b453b49ef Mon Sep 17 00:00:00 2001 From: sean mckenna Date: Mon, 1 Nov 2021 10:00:51 -0400 Subject: [PATCH 43/43] fix --- jenkinsfile-BD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jenkinsfile-BD b/jenkinsfile-BD index d07c28e2..f9fbee1b 100644 --- a/jenkinsfile-BD +++ b/jenkinsfile-BD @@ -14,7 +14,7 @@ pipeline { stage('Build') { steps { - sh 'mvn -DskipTests=true build' + sh 'mvn -DskipTests=true install' } }