forked from bcgov/gcpe-news-dashboard
-
Notifications
You must be signed in to change notification settings - Fork 0
/
News-Dashboard-Develop-Full-Jenkinsfile
56 lines (51 loc) · 2.14 KB
/
News-Dashboard-Develop-Full-Jenkinsfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
node('master') {
stage('Code Quality') {
echo "Running SonarQube static code analysis."
openshiftBuild bldCfg: 'frontend-sonar', showBuildLogs: 'true'
}
stage('Dependency Security Check') {
echo "Running Snyk analysis of dependencies"
openshiftBuild bldCfg: 'frontend-snyk', showBuildLogs: 'true'
}
stage('Build Image') {
echo "Building..."
openshiftBuild bldCfg: 'news-dashboard-static', showBuildLogs: 'true'
openshiftTag destStream: 'news-dashboard-static', verbose: 'true', destTag: 'DEVELOP-$BUILD_ID', srcStream: 'news-dashboard-static', srcTag: 'latest'
}
stage('Deploy on Dev') {
echo "Deploying to dev..."
openshiftTag destStream: 'news-dashboard-static', verbose: 'true', destTag: 'dev', srcStream: 'news-dashboard-static', srcTag: 'DEVELOP-$BUILD_ID'
// Sleeping for a while to wait deployment completes
sh 'sleep 1m'
}
}
//See https://github.com/jenkinsci/kubernetes-plugin
podTemplate(label: 'owasp-zap', name: 'owasp-zap', serviceAccount: 'jenkins', cloud: 'openshift', containers: [
containerTemplate(
name: 'jnlp',
image: '172.50.0.2:5000/openshift/jenkins-slave-zap',
resourceRequestCpu: '500m',
resourceLimitCpu: '1000m',
resourceRequestMemory: '3Gi',
resourceLimitMemory: '4Gi',
workingDir: '/tmp',
command: '',
args: '${computer.jnlpmac} ${computer.name}'
)
]) {
node('owasp-zap') {
stage('ZAP Security Scan') {
dir('/zap') {
def retVal = sh returnStatus: true, script: '/zap/zap-baseline.py -r baseline.html -t https://dev.dashboard.news.gov.bc.ca/'
publishHTML(target: [allowMissing: false, alwaysLinkToLastBuild: false, keepAll: true, reportDir: '/zap/wrk', reportFiles: 'baseline.html', reportName: 'ZAP Baseline Scan', reportTitles: 'ZAP Baseline Scan'])
echo "Return value is: ${retVal}"
}
}
}
}
stage('Deploy on Test') {
input "Deploying to test?"
node('master') {
openshiftTag destStream: 'news-dashboard-static', verbose: 'true', destTag: 'test', srcStream: 'news-dashboard-static', srcTag: 'dev'
}
}