issues
search
bcgov
/
TheOrgBook
A public repository of verifiable claims about organizations. A key component of the Verifiable Organization Network.
http://von.pathfinder.gov.bc.ca
Apache License 2.0
78
stars
66
forks
source link
#603 - Integrate Zap Scanning
#624
Closed
WadeBarnes
closed
6 years ago
WadeBarnes
commented
6 years ago
Add a stand-alone Zap Scanning pipeline which preforms a baseline scan on the application once deployed to DEV.
Performs scan and then publishes the results in SonarQube-Jenkinsfile
Wire the Zap Scan into the tob-web pipeline
The pipeline now waits for the deployment to complete and then triggers the Zap Scanning pipeline to perform an acrimonious scan.
Also migrated the tob-web pipeline over to using the OpenShift Client Jenkins Plugin syntax.
Add Zap quality badges to the ReadMe which link to the live reports in SonarQube.