2020-10-17 01:26:53 +02:00
|
|
|
// Job definition to test PostgreSQL connector against different PostgreSQL versions
|
|
|
|
|
|
|
|
|
|
freeStyleJob('tools-debezium-source-clear') {
|
|
|
|
|
|
|
|
|
|
displayName('Vulnerability scan')
|
|
|
|
|
description('Executes SourceClear vulnerability scan of Debezium sources and binaries')
|
|
|
|
|
label('Slave')
|
|
|
|
|
|
|
|
|
|
properties {
|
|
|
|
|
githubProjectUrl('https://github.com/debezium/debezium')
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
logRotator {
|
|
|
|
|
daysToKeep(7)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
wrappers {
|
|
|
|
|
timeout {
|
2020-11-03 16:49:34 +01:00
|
|
|
noActivity(900)
|
2020-10-17 01:26:53 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
credentialsBinding {
|
|
|
|
|
string('SRCCLR_TOKEN', 'debezium-srcclr-token')
|
|
|
|
|
string('SOURCE_MAVEN_REPO', 'debezium-prod-repo')
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
publishers {
|
|
|
|
|
mailer('jpechane@redhat.com', false, true)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
parameters {
|
|
|
|
|
stringParam('BUILD_VERSION', '', "Maven artifact id of the product binaries")
|
|
|
|
|
stringParam('PRODUCT_VERSION', '', "Product version")
|
|
|
|
|
stringParam('SOURCE_TAG', "", "Tagged version of source code to scan")
|
|
|
|
|
booleanParam('BINARY', false, "Scan binary artifacts")
|
|
|
|
|
stringParam('PLUGINS', "mysql postgres mongodb sqlserver", "The plugins whose binaries should be scanned")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
steps {
|
|
|
|
|
shell('''
|
|
|
|
|
if [ "$BINARY" = "false" ]; then
|
|
|
|
|
docker run -e SRCCLR_TOKEN="$SRCCLR_TOKEN" quay.io/debezium/vulnerability-scan scm https://github.com/debezium/debezium.git "$PRODUCT_VERSION" "$SOURCE_TAG"
|
|
|
|
|
else
|
|
|
|
|
for CONNECTOR in $PLUGINS; do
|
|
|
|
|
docker run -e SRCCLR_TOKEN="$SRCCLR_TOKEN" quay.io/debezium/vulnerability-scan binary "$SOURCE_MAVEN_REPO/debezium-connector-$CONNECTOR/$BUILD_VERSION/debezium-connector-$CONNECTOR-${BUILD_VERSION}-plugin.zip" "$PRODUCT_VERSION" "$SOURCE_TAG"
|
|
|
|
|
done
|
|
|
|
|
fi
|
|
|
|
|
''')
|
|
|
|
|
}
|
|
|
|
|
}
|
