From f1bbf7ffb6c76f9a2abc2f517d808780ebb80b39 Mon Sep 17 00:00:00 2001 From: Dongho Kim Date: Wed, 10 Dec 2025 13:02:56 +0100 Subject: [PATCH] update --- Jenkinsfile | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/Jenkinsfile b/Jenkinsfile index c03a822..115cdd8 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -1,11 +1,19 @@ pipeline { agent any + // Explicitly define the tool to ensure it is available on the path. + // The symbol 'dependency-check' usually corresponds to the OWASP Dependency-Check plugin tool type. + tools { + 'dependency-check' 'depcheck' + } + stages { stage('Security Scan') { steps { - // Run OWASP Dependency Check - // 'depcheck' matches the tool name configured in Jenkins Global Tool Configuration + // Debug: Verify the tool is available and print version + sh 'dependency-check.sh --version || echo "WARNING: dependency-check.sh not found in PATH"' + + // Run OWASP Dependency Check using the specific installation dependencyCheck additionalArguments: '--scan ./ --format ALL', odcInstallation: 'depcheck' } } @@ -16,7 +24,7 @@ pipeline { // Publish the results dependencyCheckPublisher pattern: 'dependency-check-report.xml' - // Archive the reports so they can be viewed in Jenkins UI + // Archive the reports archiveArtifacts allowEmptyArchive: true, artifacts: 'dependency-check-report.html' } }