Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Asgardeo] Integrate JFrog - Add Jfrog scanning to Azure Devops pipeline #50

Merged
merged 10 commits into from
May 2, 2024
Merged

[Asgardeo] Integrate JFrog - Add Jfrog scanning to Azure Devops pipeline #50

Changes from 5 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
04b057a
Add Jfrog scan template
IsuruGunarathne Apr 30, 2024
0b77fd0
Update SCA scan template with JFrog parameters
CharinduThisara Apr 30, 2024
b440462
Update parameter names
IsuruGunarathne May 2, 2024
e9e2809
Fix autoformatting error
IsuruGunarathne May 2, 2024
5ae17ae
Update template release version
IsuruGunarathne May 2, 2024
8b4a23d
Hardcode github connection, remove SERVER_ID and SERVER_URL parameters
IsuruGunarathne May 2, 2024
236bec1
Update template release version
IsuruGunarathne May 2, 2024
bf09d6e
Change access token variable name
IsuruGunarathne May 2, 2024
df7db75
Move Jfrog test to run first
IsuruGunarathne May 2, 2024
9c46856
Update template release version
IsuruGunarathne May 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion .azure/asgardeo-java-oidc-sdk-sca-scan.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ resources:
- repository: templates
type: github
name: wso2-enterprise/azure-pipeline-templates
ref: refs/tags/v1.2.11
ref: refs/tags/v1.4.1
endpoint: asgardeo-github-sca-scan

jobs:
Expand All @@ -45,3 +45,10 @@ jobs:
parameters:
API_KEY: $(FOSSA-API-KEY)
BRANCH: master
- template: ci-pipelines/templates/sca-scan-jfrog.yaml@templates
parameters:
PROJECT_TYPE: mvn
GITHUB_CONNECTION: $(GITHUB_CONNECTION) # GitHub connection name to Show the vulnerability report as a PR comment
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This has to be GITHUB_CONNECTION: asgardeo-github-sca-scan

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changed in commit 8b4a23d

ACCESS_TOKEN: $(ACCESS_TOKEN) # JFrog access token
SERVER_ID: $(CONNECTION_NAME) # JFrog SERVER ID
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Move this and the following parameters to the template.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done, only Access token has to be provided as a parameter

SERVER_URL: $(URL) # JFrog platform URL.