test checkov
@@ -22,6 +22,20 @@ pipeline {
}
}
+ stage ("SAST: Scan AWS Cloudformation ") {
+ steps {
+ sh "cfn_nag --output-format=json cia-dist-cloudformation/src/main/resources/cia-dist-cloudformation.yml > cia-dist-cloudformation.yml.nagscan || true"
+ archiveArtifacts "cia-dist-cloudformation.yml.nagscan"
+ sh "checkov -f cia-dist-cloudformation/src/main/resources/cia-dist-cloudformation.json -o json > cia-dist-cloudformation.checkov-report || true"
+ }
+ }
+
+ stage ("SAST: Scan code and Check Quality gate") {
+ steps {
+ sh "mvn sonar:sonar -Prelease-site,all-modules -Dmaven.test.failure.ignore=true -Djavamelody.storage-directory=/tmp/javamelody-jenkins/ -Dmaven.test.skip=true -Dsonar.dynamicAnalysis=reuseReports -Dsonar.host.url=http://192.168.1.15:9000/sonar/ -Dsonar.checkov.reportFiles=cia-dist-cloudformation.checkov-report -Dsonar.cfn.nag.reportFiles=cia-dist-cloudformation.yml.nagscan -Dsonar.dependencyCheck.xmlReportPath=citizen-intelligence-agency/target/dependency-check-report.xml -Dsonar.dependencyCheck.htmlReportPath=citizen-intelligence-agency/target/dependency-check-report.html -Dsonar.zaproxy.reportPath=zap-reports/baseline-scan-report.xml -Dsonar.zaproxy.htmlReportPath=zap-reports/baseline-scan-report.html"
+ }
+ }
+
stage('Generate OpsDoc') {
steps {
sh "cd cia-dist-cloudformation/src/main/config/; chmod a+x *.sh; ./cfn-cloudformation-flip.sh;./generate-cloudformation-doc.sh || true"
@@ -156,19 +170,6 @@ pipeline {
}
}
- stage ("SAST: Scan AWS Cloudformation ") {
- steps {
- sh "cfn_nag --output-format=json cia-dist-cloudformation/src/main/resources/cia-dist-cloudformation.yml > cia-dist-cloudformation.yml.nagscan || true"
- archiveArtifacts "cia-dist-cloudformation.yml.nagscan"
- sh "checkov -f cia-dist-cloudformation/src/main/resources/cia-dist-cloudformation.json -o json > cia-dist-cloudformation.checkov-report || true"
- }
- }
-
- stage ("SAST: Scan code and Check Quality gate") {
- steps {
- sh "mvn sonar:sonar -Prelease-site,all-modules -Dmaven.test.failure.ignore=true -Djavamelody.storage-directory=/tmp/javamelody-jenkins/ -Dmaven.test.skip=true -Dsonar.dynamicAnalysis=reuseReports -Dsonar.host.url=http://192.168.1.15:9000/sonar/ -Dsonar.checkov.reportFiles=cia-dist-cloudformation.checkov-report -Dsonar.cfn.nag.reportFiles=cia-dist-cloudformation.yml.nagscan -Dsonar.dependencyCheck.xmlReportPath=citizen-intelligence-agency/target/dependency-check-report.xml -Dsonar.dependencyCheck.htmlReportPath=citizen-intelligence-agency/target/dependency-check-report.html -Dsonar.zaproxy.reportPath=zap-reports/baseline-scan-report.xml -Dsonar.zaproxy.htmlReportPath=zap-reports/baseline-scan-report.html"
- }
- }
stage ("Prepare cloud environment resources") { steps {
sh "echo placeholder"
