tiloKo
9e1eecb929
http request: reduce log message severity from info to debug for TLS related messages ( #4106 )
...
* lower tls related log messages from info to debug level
* remove protcodeExecuteScan related warnings
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
2022-11-10 13:17:21 +01:00
Raghunath Deshpande
ad36fe5a30
Whitesource to Mend name change (only for step description docu and not step name) ( #4114 )
...
* Whitesource to Mend name change
* name change from whitesource to mend
2022-11-09 12:04:10 +01:00
dependabot[bot]
db8a8f61cf
Bump junit from 1.23 to 1.24 ( #3868 )
...
Bumps junit from 1.23 to 1.24.
---
updated-dependencies:
- dependency-name: org.jenkins-ci.plugins:junit
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-11-08 15:41:45 +01:00
dependabot[bot]
2f15330dcc
chore(deps): bump helm.sh/helm/v3 from 3.8.0 to 3.9.4 ( #3988 )
...
Bumps [helm.sh/helm/v3](https://github.com/helm/helm ) from 3.8.0 to 3.9.4.
- [Release notes](https://github.com/helm/helm/releases )
- [Commits](https://github.com/helm/helm/compare/v3.8.0...v3.9.4 )
---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-11-08 15:27:20 +01:00
dependabot[bot]
0f2d4390b1
chore(deps-dev): bump snakeyaml from 1.26 to 1.31 ( #4010 )
...
Bumps [snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml ) from 1.26 to 1.31.
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-1.31..snakeyaml-1.26 )
---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-11-08 12:43:25 +01:00
tiloKo
8bc0fb05a7
escape value in json ( #4102 )
...
* escape value in json
* delete old code
* replace complete parsing by json.Marshal
* delete old code and add header
Co-authored-by: rosemarieB <45030247+rosemarieB@users.noreply.github.com>
2022-11-08 12:13:41 +01:00
Oliver Nocon
25216b3ef8
chore: update formatting ( #4111 )
2022-11-08 08:47:38 +01:00
Johannes Dillmann
5f643826f5
Add source repo for helmExecute ( #4082 )
...
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
Co-authored-by: Ralf Pannemans <ralf.pannemans@sap.com>
2022-11-07 15:35:00 +00:00
Vyacheslav Starostin
c802aa512d
artifactPrepareVersion: update documentation ( #4107 )
2022-11-07 20:55:03 +06:00
JeromePierreSAP
43c64b63a9
Update WaitForBuildToFinish to use Poll() method ( #4092 )
...
* Update WaitForBuildToFinish to use Poll() method
https://pkg.go.dev/github.com/bndr/gojenkins#readme-to-always-get-fresh-data-use-the-poll-method
https://github.com/bndr/gojenkins#usage
* update Build interface
* add Poll mock function
* Add Poll call in TestWaitForBuildToFinish
* Test
Co-authored-by: Vyacheslav Starostin <32613074+vstarostin@users.noreply.github.com>
2022-11-07 20:28:03 +06:00
Ashly Mathew
e2c710c035
Introducing syft to generate SBOMS for kaniko builds ( #4093 )
...
* Update kanikoExecute.go
* Syft function
* Change installation directory to ease cleanup
* Add createBOM option
* Unit tests
* Refactor code
Co-authored-by: raman-susla-epam <104915202+raman-susla-epam@users.noreply.github.com>
2022-11-07 14:27:05 +01:00
Vyacheslav Starostin
d256c3a604
sonarExecuteScan: fix building the URL to call sonar API ( #4105 )
...
* Fix IssueService
* Debug
* Debug
* Fix ComponentService
* Clean up
* Add comments
2022-11-07 18:10:47 +06:00
Frank Cheng
7f6fbe4bac
chore: let fortify support maven self Define parameters ( #4091 )
...
* let fortify support maven self Define parameters
2022-11-07 16:47:11 +05:30
Oliver Nocon
a2815c4567
fix(whitesourceExecuteScan): properly handle policy violations ( #4089 )
...
* fix(whitesourceExecuteScan): properly handle policy violations
* update files
* update formatting
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
2022-11-07 11:16:07 +01:00
Jordan Levin
2866ef5592
feat (protecodeExecuteScan) support custom data headers in upload request ( #3836 )
...
* support custom data headers in Protecode upload API
* parse custom data properly
* better debugging
* pre-pend META- to custom data header
* prepend to key, not value
* fix debug output
* Fix debug log level
* Make custom header meta upper case key
* fix
* Update http.go
* Update protecode.go
* Update http.go
* address PR review
* Fix merge conflicts
* Update fortifyExecuteScan.yaml
* Update protecodeExecuteScan_generated.go
* Generate step
* fix generated code
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-11-03 17:53:23 +01:00
Thilaknath
e25b2a126f
feat (remove key from commonPipelineEnvironment) ( #4074 )
...
* Add method to remove values from commonPipelineEnvironment
* Add test to validate remove value from map
Co-authored-by: i850487 <thilaknath.ashok.kumar@sap.com>
2022-11-03 15:27:47 +01:00
Oliver Nocon
761dc75e82
Update build-adr.yml ( #4101 )
2022-11-03 08:50:41 +01:00
charly-lemee
885a5e73e3
fix: typo in checkmarx scan ( #4072 )
...
* fix: typo with checkmarx report
2022-11-03 13:18:17 +05:30
Daria Kuznetsova
e11fec77c5
fix(fortifyExecuteScan): Check empty source base path in fvdl ( #4099 )
...
* Check empty source base path in fvdl
2022-11-02 23:43:49 +05:30
Christian Volk
6702e146b1
fix(githubPublishRelease): allow repo and owner to be configured globally ( #4090 )
2022-11-02 13:41:15 +00:00
Oliver Nocon
e44aaf86e4
chore: prepare setup for future ADRs ( #4054 )
...
* chore: prepare setup for future ADRs
* Update build-adr.yml
2022-11-02 14:30:34 +01:00
Daria Kuznetsova
cfa26f7c3f
improved logging with fortify server URL ( #4098 )
...
* improved logging with fortify server URL
2022-11-02 17:18:54 +05:30
Vyacheslav Starostin
a84b9d65ac
sonarExecuteScan: run sonar image as root ( #4097 )
2022-11-01 20:51:25 +06:00
Vyacheslav Starostin
e9c366392e
Update sonar image version ( #4094 )
...
Co-authored-by: Vyacheslav Starostin <vyacheslav.starostin@sap.com>
2022-10-31 16:33:24 +01:00
Johannes Dillmann
cfacde97be
Allow run-image to be specified ( #4088 )
...
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
2022-10-27 15:18:32 +02:00
Philipp Stehle
95c8166796
fix(cnbBuild): allow setting empty env variables in project descriptor ( #4084 )
2022-10-25 14:35:24 +02:00
Vyacheslav Starostin
a7dd0bac50
gradleExecuteBuild: get published artifacts names and write those to CPE ( #4076 )
...
* Add new output to CPE && go generate
* Add published artifacts names to CPE
* Add tests
* Change name
Co-authored-by: Vyacheslav Starostin <vyacheslav.starostin@sap.com>
Co-authored-by: Ashly Mathew <ashly.mathew@sap.com>
Co-authored-by: Anil Keshav <anil.keshav@sap.com>
2022-10-25 13:17:42 +02:00
Anil Keshav
2d56e3f4dc
fix (npmExecuteScripts) pinning @cyclonedx/bom to major version 3 ( #4081 )
...
* pinning cyclone dx to major version 3
* fxing unit test
Co-authored-by: anilkeshav27 <you@example.com>
2022-10-24 13:42:11 +02:00
Philipp Stehle
48e959b4a9
fix(golangBuild) pass testOptions to gotestsum ( #4077 )
...
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
Co-authored-by: Pavel Busko <pavel.busko@sap.com>
2022-10-21 11:29:23 +02:00
Philipp Stehle
4c1ecdbbba
fix(JenkinsConfigProvider): panic in GetBuildReason ( #4073 )
...
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
Co-authored-by: Sumit Kulhadia <sumit.kulhadia@sap.com>
2022-10-20 08:38:10 +02:00
Anil Keshav
f270aa4a17
including sarif files when running implicit report upload from the step itself ( #4068 )
...
Co-authored-by: anilkeshav27 <you@example.com>
2022-10-18 09:48:07 +02:00
thtri
8d1e1bac96
fix(fortify,checkmarx): enable SARIF generation as baseline ( #4053 )
...
Co-authored-by: sumeet patil <sumeet.patil@sap.com>
2022-10-17 14:09:02 +02:00
Oliver Nocon
e2db94dc5e
chore(mavenBuild): add default retries for certificate download ( #3957 )
...
Co-authored-by: Sven Merk <33895725+nevskrem@users.noreply.github.com>
2022-10-14 10:31:28 +02:00
dependabot[bot]
183f792674
chore(deps): bump github.com/hashicorp/vault from 1.9.3 to 1.9.9 ( #4045 )
...
Bumps [github.com/hashicorp/vault](https://github.com/hashicorp/vault ) from 1.9.3 to 1.9.9.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.9.3...v1.9.9 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-10-14 08:11:56 +02:00
Sven Merk
ea04a63412
fix(whitesourceExecuteScan): Fix processing of assessment ( #4059 )
...
* Fix potential nil reference
* Fix handling of assessed vulns
* Fix test code
* Add error detail
* Fix parsing
* Adding debug output
* Fix nil reference
* fix
* Add debug
* Update cmd/whitesourceExecuteScan.go
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
* Update cmd/whitesourceExecuteScan.go
* Update cmd/whitesourceExecuteScan.go
* Fix fmt
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-10-13 10:34:02 +00:00
Pavel Busko
cf301a758f
fix(helmExecute): explicitly set buildDescriptorFile if the chartPath is configured ( #4063 )
...
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
2022-10-13 11:11:00 +02:00
Daniel Mieg
37a3504152
Adapt default ( #4066 )
2022-10-12 13:46:19 +02:00
Daniel Mieg
ebac0da332
Add create tag to abapEnvironmentPipeline ( #3870 )
...
* Add alias
* Add step and defaults
* Add closing }
* Add test
* Remove alias
* initial copy
* Change step activation
* Change test
* Read foreign config
* Fix Syntax
* Test
* Test
* Only consider stage config
* Test config
* Test
* Test
* Change echo
* Fix
* Test
* Default test
* Uncomment
* Test different outputs
* Adapt Config
Co-authored-by: tiloKo <70266685+tiloKo@users.noreply.github.com>
2022-10-12 10:20:13 +02:00
Linda Siebert
4e0b4824f0
cloudFoundryDeploy- support manifest.yml as true default ( #4050 )
...
* Add new default
* Revert "Add new default"
This reverts commit c9c3ae2e80
.
* Change config to have default
* Revert "Change config to have default"
This reverts commit e65517457f
.
* Add method
* Add space to match
* Add cf native test
2022-10-11 14:12:35 +02:00
tiloKo
6bf6e0b3ea
rename actual to current ( #4058 )
2022-10-11 10:52:24 +02:00
Umidjon Urunov
e9707e7638
Added user API key authentication method ( #3748 )
...
* changes to detectExec before master merge
* changes for detectExecuteScan
* self generated code added
* fix syntax errors and update docu
* added unit tests for fail and Group
* fix failOn bug
* add Groups as string array
* add Groups as string array
* tests and validation for groups, failOn
* Updated docs and added more tests
* documentation md files should not be changed
* Handle merge conflicts from PR 1845
* fix merge errors
* remove duplicate groups, merge error
* adding buildCode and buildTool as params
* switching build options
* building maven modules
* parameter correction
* parameter correction
* gnerate with new build parameter
* adding comments
* removing piper lib master and modifying goUtils to download 1.5.7 release
* first cleaning then installing
* multi module maven built
* multi module maven built removing unwanted code
* multi module maven built moving inside switch
* testing
* modifying the default use case to also call maven build
* modifying the default use case to also call maven build wih --
* corrected maven build command
* corrected maven build command with %v
* skipping test runs
* testing for MTA project with single pom
* adding absolute path to m2 path
* clean up
* adding switch for mta and maven and removing env from containers
* commiting changes for new detect step
* correting log message
* code clean up
* unit tests changes to detectExecute
* basic tests for new change
* restoring piperGoUtils to download correct piper binary
* code clean up
* code clean up
* protecodeExecuteScan -> Added authentication with user API key
* protecodeExecuteScan -> updating .yml file
* protecodeExecuteScan -> go generate fixed
* protecodeExecuteScan -> naming convention applied for UserAPIKey parameter
* protecodeExecuteScan -> extending groovy code for mapping jenkins credentials
Co-authored-by: D072410 <giridhar.shenoy@sap.com>
Co-authored-by: Keshav <anil.keshav@sap.com>
Co-authored-by: Oliver Nocon <33484802+OliverNocon@users.noreply.github.com>
2022-10-10 10:55:21 +02:00
Sven Merk
e8ba1b043d
Fix(detectExecuteScan): rework struct methods to meet interface requirements ( #4048 )
...
* Fixed struct methods to meet interface requirements
* Fix test and ruleID
* Small adjustments
* Readability of code
* Added testcases
* Code rework
* Fix fmt
* Mod
* Fix taxonomy
* Fix ruleIndex
* Fix taxonomies
* Fix format
* Remove name
* Fix Fortify and Checkmarx SARIF
* Fix fmt, address comments
* Addressing comments
* Fix fmt
2022-10-10 10:06:20 +02:00
Marc Bormeth
db5351f4d3
Build and release Piper binary for Apple Silicon as well ( #4016 )
2022-10-05 15:31:47 +04:00
Jordi van Liempt
8035a8c38e
docs(development): Add info about release process ( #4005 )
...
* docs(development): Add info about release process
* fix linting issue
* Update DEVELOPMENT.md
* fix lint error
Co-authored-by: I557621 <jordi.van.liempt@sap.com>
Co-authored-by: Christopher Fenner <26137398+CCFenner@users.noreply.github.com>
2022-09-27 12:51:57 +02:00
Christopher Fenner
07eeb2f33e
feat: update node image for various steps to new LTS ( #3913 )
...
* update node image for steps
* update defaults
* update generated sources
* update tests
Co-authored-by: Vyacheslav Starostin <vyacheslav.starostin@sap.com>
2022-09-26 18:40:55 +06:00
Giridhar Shenoy
d31c0584ff
detectExecuteScan : Add minScanInterval parameter through Piper ( #4006 )
...
* add minscaninterval parameter
* update detectExec
* removed a single trailing space which caused a lint failure
* Add test case
* Ensure unmap is false
* fix test case
* update format of param value
2022-09-26 14:08:12 +02:00
Peter Persiel
bfca6eb020
Reuse software component before leading software component ( #4046 )
2022-09-26 12:37:39 +02:00
Vyacheslav Starostin
6cadb15a11
kubernetesDeploy: add additional unstashing ( #4017 )
...
Co-authored-by: Alexey Matvievsky <72048991+matvievsky@users.noreply.github.com>
2022-09-23 17:46:05 +06:00
Jan von Löwenstein
2843d6ae75
Remove leftover Printf ( #4002 )
...
Co-authored-by: Philipp Stehle <philipp.stehle@sap.com>
2022-09-23 10:01:12 +02:00
Alexey Matvievsky
2dfca180a7
(feat) Golang integration tests dynamic workflow
...
* Dynamic version detection of Golang
* Dynamic Golang integration tests run matrix
* Golang timeout to build set at 5 min
* Golang integration test timeout to run set at 10 min
* Consumer tests timeout set at 20 min
Co-authored-by: Alexey Matvievsky <alexey.matvievsky@sap.com>
2022-09-22 19:12:13 +02:00