Changes for page Jenkins Shared Library
Last modified by Boris Folgmann on 2025/11/03 09:41
From version 7.1
edited by Boris Folgmann
on 2025/11/03 09:14
on 2025/11/03 09:14
Change comment:
There is no comment for this version
To version 6.6
edited by Boris Folgmann
on 2025/11/03 09:09
on 2025/11/03 09:09
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -355,9 +355,10 @@ 355 355 )))|((( 356 356 Id of the Jenkins Credentials for signers private keyfile. 357 357 ))) 358 -|=(% colspan="1" rowspan=" 8" %)(((358 +|=(% colspan="1" rowspan="14" %)((( 359 359 Static Source Code Analysis 360 -)))|((( 360 +))) 361 +Dependency Check|((( 361 361 checkstyleConfig 362 362 )))|((( 363 363 best-practice releaxed configuration ... ... @@ -380,7 +380,32 @@ 380 380 )))|((( 381 381 Name of a config file to use for yamllint. If not set a best-practice[[ relaxed configuration >>url:https://prd.sdc.t-systems.net/bitbucket/projects/DEVOPSAAS/repos/sdcloud-caas-jenkins-libs/browse/resources/com/tsystems/sdc/jenkinslib/yamllint.yml||shape="rect"]]is used which is different from the original yamllint[[ config>>url:https://yamllint.readthedocs.io/en/stable/configuration.html#default-configuration||shape="rect"]]. 382 382 ))) 384 +|skipDependencyCheck|false|Set to true to skip the dependency-check. 383 383 |((( 386 +dependencyCheckTool 387 +)))|((( 388 +'dependency-check' 389 +)))|((( 390 +Defines which named dependency-check tool should be used. 391 +))) 392 +|dependencyCheckMvnArgs|'-DassemblyAnalyzerEnabled=false'|Additional arguments which are be passed to dependency-check for maven projects.((( 393 +See [[Dependency Check Maven Configuration>>https://jeremylong.github.io/DependencyCheck/dependency-check-maven/configuration.html]] for more information. 394 +))) 395 +|((( 396 +dependencyCheckArgs 397 +)))|((( 398 +'~-~-disableAssembly' 399 +)))|((( 400 +Addtional arguments which are be passed to dependency-check. See [[Dependency>>url:https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html||shape="rect"]][[ Check CLI Arguments>>url:https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html||shape="rect"]] for more information. 401 +))) 402 +|((( 403 +dependencyCheckNvdApiKeyCredentialsId 404 +)))|((( 405 +'dependency-check-nvdapikey' 406 +)))|((( 407 +If you have your own NVD API Key, set it as a credential of type text in Jenkins. Then specify the credential id using this argument. It will be automatically passed to dependency-check. There will be no error if no credential is found. Just the NVD download will be slower. Please note, on DevOps-as-a-Service a shared NVD API Key is automatically supplied for the default credential id. 408 +))) 409 +|((( 384 384 sonarQube 385 385 )))|((( 386 386 true for the defaultBranch and for pull-requests, if a SonarQube version is detected which supports scanning multiple branches ... ... @@ -431,13 +431,7 @@ 431 431 |sonarQualityGate| |Sets the desired quality gate to use for the scan result in SonarQube. 432 432 If not specified, the quality gate is not changed. 433 433 As a default, SonarQube will use the quality gate "Sonar way" for new scan results. 434 -|=(% colspan="1" rowspan="5" %)Dependency Check|skipDependencyCheck|false|Set to true to skip the dependency-check. 435 -|dependencyCheckTool|'dependency-check'|Defines which named dependency-check tool should be used. 436 -|dependencyCheckMvnArgs|'-DassemblyAnalyzerEnabled=false'|Additional arguments which are be passed to dependency-check for maven projects.((( 437 -See [[Dependency Check Maven Configuration>>https://jeremylong.github.io/DependencyCheck/dependency-check-maven/configuration.html]] for more information. 438 -))) 439 -|dependencyCheckArgs|'~-~-disableAssembly'|Addtional arguments which are be passed to dependency-check. See [[Dependency>>url:https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html||shape="rect"]][[ Check CLI Arguments>>url:https://jeremylong.github.io/DependencyCheck/dependency-check-cli/arguments.html||shape="rect"]] for more information. 440 -|dependencyCheckNvdApiKeyCredentialsId|'dependency-check-nvdapikey'|If you have your own NVD API Key, set it as a credential of type text in Jenkins. Then specify the credential id using this argument. It will be automatically passed to dependency-check. There will be no error if no credential is found. Just the NVD download will be slower. Please note, on DevOps-as-a-Service a shared NVD API Key is automatically supplied for the default credential id. 460 +| | | 441 441 |=(% colspan="1" rowspan="2" %)Dependency Track|depTrackCredentialsId|'PROJECTKEY-deptrack-projectcreator'|((( 442 442 Id of the Jenkins Credential which has to be used to authenticate to Dependency Track for publishing the SBOM. 443 443 )))