jenkins/sap-jenkins-library
1
0
Fork 0
mirror of https://github.com/SAP/jenkins-library.git synced 2025-09-16 09:26:22 +02:00
Code Issues Releases Activity

added info for rapid scan in detectExecution (#4194)

Browse Source 
* added info for rapid scan in detectExecution
This commit is contained in:
Akramdzhon Azamov
2023-01-20 14:39:53 +05:00
committed by GitHub
parent 1ae967061d
commit 36caf31072
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
documentation/docs/steps/detectExecuteScan.md
View File

@@ -11,3 +11,15 @@ You need to store the API token for the Detect service as _'Secret text'_ creden
## ${docGenParameters}
## ${docGenConfiguration}
## Rapid scan - Pending: Feb 6th, 2023
In addition to the full scan, Black Duck also offers a faster and easier scan option, called "Rapid Scan". Its main advantage is speed. In most cases, the scan is completed in less than 30 seconds.
If the orchestrator (Jenkins, Azure, Github Actions) is configured to detect pull requests, the pipeline can recognize this and change the Black Duck scan mode from "Full" to "Rapid".
If `githubApi` and `githubToken` are provided, the pipeline adds the scan result to the comment of the opened pull request.
There is also a parameter, `scanMode`, for the DetectExecution step, which you can use to change the scan mode to "Rapid".
Note: Despite rapid scans doing necessary security checks for daily development, it is not sufficient for production deployment and releases. Only use full scans for production deployment and releases.