4
Jenkinsfile
vendored
4
Jenkinsfile
vendored
@@ -33,7 +33,7 @@ pipeline {
|
|||||||
stage('SAST - Semgrep') {
|
stage('SAST - Semgrep') {
|
||||||
steps {
|
steps {
|
||||||
sh """
|
sh """
|
||||||
docker run --rm -v "$(pwd):/src" \
|
docker run --rm -v "\$(pwd):/src" \
|
||||||
returntocorp/semgrep \
|
returntocorp/semgrep \
|
||||||
semgrep scan --config=auto \
|
semgrep scan --config=auto \
|
||||||
--sarif --output /src/semgrep.sarif \
|
--sarif --output /src/semgrep.sarif \
|
||||||
@@ -48,7 +48,7 @@ pipeline {
|
|||||||
curl -X POST "${DD_URL}/api/v2/import-scan/" \
|
curl -X POST "${DD_URL}/api/v2/import-scan/" \
|
||||||
-H "Authorization: Token ${DD_API_KEY}" \
|
-H "Authorization: Token ${DD_API_KEY}" \
|
||||||
-F "scan_type=SARIF" \
|
-F "scan_type=SARIF" \
|
||||||
-F "file=@$(pwd)/semgrep.sarif" \
|
-F "file=@\$(pwd)/semgrep.sarif" \
|
||||||
-F "product_name=ReSendit" \
|
-F "product_name=ReSendit" \
|
||||||
-F "engagement_name=Jenkins-CI" \
|
-F "engagement_name=Jenkins-CI" \
|
||||||
-F "auto_create_context=true" \
|
-F "auto_create_context=true" \
|
||||||
|
|||||||
Reference in New Issue
Block a user