1
0
mirror of https://github.com/SAP/jenkins-library.git synced 2024-12-12 10:55:20 +02:00
sap-jenkins-library/pkg
thtri 3ae51e2661
fix(cxone): new endpoint for project creation (#4889)
* Initial in progress

* compiling but not yet functional

* Missed file

* updated checkmarxone step

* Working up to fetching a project then breaks

* Missed file

* Breaks when retrieving projects+proxy set

* Create project & run scan working, now polling

* Fixed polling

* added back the zipfile remove command

* Fixed polling again

* Generates and downloads PDF report

* Updated and working, prep for refactor

* Added compliance steps

* Cleanup, reporting, added groovy connector

* fixed groovy file

* checkmarxone to checkmarxOne

* checkmarxone to checkmarxOne

* split credentials (id+secret, apikey), renamed pullrequestname to branch, groovy fix

* Fixed filenames & yaml

* missed the metadata_generated.go

* added json to sarif conversion

* fix:type in new checkmarxone package

* fix:type in new checkmarxone package

* removed test logs, added temp error log for creds

* extra debugging to fix crash

* improved auth logging, fixed query parse issue

* fixed bug with group fetch when using oauth user

* CWE can be -1 if not defined, can't be uint

* Query also had CweID

* Disabled predicates-fetch in sarif generation

* Removing leftover info log message

* Better error handling

* fixed default preset configuration

* removing .bat files - sorry

* Cleanup per initial review

* refactoring per Gist, fixed project find, add apps

* small fix - sorry for commit noise while testing

* Fixing issues with incremental scans.

* removing maxretries

* Updated per PR feedback, further changes todo toda

* JSON Report changes and reporting cleanup

* removing .bat (again?)

* adding docs, groovy unit test, linter fixes

* Started adding tests maybe 15% covered

* fix(checkmarxOne): test cases for pkg and reporting

* fix(checkmarxOne):fix formatting

* feat(checkmarxone): update interface with missing method

* feat(checkmarxone):change runStep signature to be able to inject dependency

* feat(checkmarxone): add tests for step (wip)

* Adding a bit more coverage

* feat(checkmarxOne): fix code review

* feat(checkmarxOne): fix code review

* feat(checkmarxOne): fix code review

* feat(checkmarxOne): fix integration test PR

* adding scan-summary bug workaround, reportgen fail

* enforceThresholds fix when no results passed in

* fixed gap when preset empty in yaml & project conf

* fixed another gap in preset selection

* fix 0-result panic

* fail when no preset is set anywhere

* removed comment

* initial project-under-app support

* fixing sarif reportgen

* some cleanup of error messages

* post-merge test fixes

* revert previous upstream merge

* adding "incremental" to "full" triggers

* wrong boolean

* project-in-application api change prep

* Fixing SARIF report without preset access

* fix sarif deeplink

* removing comments

* fix(cxone):formatting

* fix(cxone):formatting

* fix(cxone):new endpoint for project creation

---------

Co-authored-by: michael kubiaczyk <michael.kubiaczyk@checkmarx.com>
Co-authored-by: michaelkubiaczyk <48311127+michaelkubiaczyk@users.noreply.github.com>
2024-04-05 14:08:43 +02:00
..
abap Enable logon to AAKaaS via Certificate (mTLS) (#4860) 2024-03-12 14:27:00 +01:00
abaputils Adapt request body for SAP_COM_0948 (#4865) 2024-03-14 16:30:19 +01:00
ado feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
ans chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
apim chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
asc chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
blackduck Add new unified fields to Mend and Blackduck SARIF (#4611) 2023-10-17 11:48:52 +02:00
buildpacks chore(cnbBuild): simplify telemetry data (#4864) 2024-03-14 15:39:30 +01:00
buildsettings feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
certutils feat(artifactPrepareVersion): Support custom certificates (#4617) 2023-10-11 13:58:38 +06:00
checkmarx chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
checkmarxone fix(cxone): new endpoint for project creation (#4889) 2024-04-05 14:08:43 +02:00
cloudfoundry chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
cnbutils Revert "feat(cnbBuild): validate docker credentials (#4840)" (#4872) 2024-03-25 10:43:23 +01:00
codeql feat(codeqlExecuteScan): added open configs for codeql database creation and analysis (#4869) 2024-04-02 10:18:17 +05:30
command update golang to 1.20 (#4783) 2024-01-22 10:18:32 +05:00
config feature(httpReadFile): Add headers to download from github release assets (#4826) 2024-02-20 09:35:41 +01:00
contrast feat(contrastExecuteScan): new step contrastExecuteScan (#4818) 2024-03-21 10:13:59 +05:30
cpi chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
docker feat(detectExecuteScan): Also scan images that are in the CPE (#4678) 2024-02-12 08:56:40 +01:00
documentation chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
format Add new unified fields to Mend and Blackduck SARIF (#4611) 2023-10-17 11:48:52 +02:00
fortify feat(fortifyExecuteScan): Fortify proxy parameter (#4543) 2023-08-31 17:18:18 +05:30
gcs feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
generator Use Pendo as analytics tool (#4828) 2024-02-20 17:17:20 +06:00
git fix(gitopsUpdateDeployment): take into account branch name when clonning (#4811) 2024-02-06 13:33:30 +05:00
github chore(refactor): Switch GitHub actions provider to use github sdk (#4563) 2023-09-20 09:38:45 +00:00
goget chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
golang added logic of fetching golang private packages for whitesource step (#4595) 2023-10-06 16:22:26 +02:00
gradle feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
hadolint/mocks chore: cleanup reporting & some incorrect file usage in tests (#3943) 2022-08-09 10:57:02 +02:00
http login via certificates (#4857) 2024-03-11 15:12:32 +01:00
influx fix(deps): update module github.com/influxdata/influxdb-client-go/v2 to v2.13.0 (#4737) 2024-01-22 14:54:34 +05:00
java feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
jenkins feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
kubernetes fix(helmExecute): only expand environment variables start with PIPER_VAULTCREDENTIAL_ (#4468) 2023-07-17 14:16:17 +06:00
log Display workspace content for debugging (#4839) 2024-02-22 12:21:13 +03:00
malwarescan fix(malwareExecuteScan): add missing error handling (#4536) 2023-08-28 15:06:35 +02:00
maven fix(maven): Add proper error handling for invalid settings.xml when publishing (#4884) 2024-04-04 09:45:33 +02:00
mock update golang to 1.20 (#4783) 2024-01-22 10:18:32 +05:00
multiarch feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
nexus feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
npm fix(npm): don't consider dev dependencies for sbom (#4690) 2024-02-28 16:05:13 +01:00
orchestrator allow reconfiguration of provider (#4776) 2024-01-15 17:51:32 +05:00
piperenv chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
piperutils feat(cnbBuild): support builders with different CNB user ids (#4625) 2023-11-02 16:03:11 +01:00
protecode chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
reporting refactor(orchestrator): Use singleton in orchestrator package and rename methods (#4639) 2024-01-09 16:01:15 +05:00
sonar feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
splunk Use Pendo as analytics tool (#4828) 2024-02-20 17:17:20 +06:00
syft feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
telemetry chore(cnbBuild): simplify telemetry data (#4864) 2024-03-14 15:39:30 +01:00
terraform feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
tms Allow cALM service key for cTMS steps (#4661) 2023-11-27 14:28:18 +01:00
toolrecord toolrecord files: remove the timestamp from the filename (#4540) 2023-09-12 22:03:49 +05:30
transportrequest feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
validation feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00
vault fix dependencies with security issues (#4790) 2024-01-24 15:19:23 +05:00
versioning chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
whitesource Removed the enforcement for gradle.aggregateModules parameter whitesource step (#4747) 2024-03-20 14:57:14 +05:30
xsuaa chore(deps): Replace io/ioutil package (#4494) 2023-08-16 12:57:04 +02:00
yaml feat(golangBuild): use 'unit' build tag to include tests during test execution (#4345) 2023-05-03 21:02:11 +05:00