Embed OWASP dependency scan into pipeline

zowe / explorer-ui-server

Simple HTTPS web server, used by explorer UI plugins

Eclipse Public License 2.0

0 stars 2 forks source link

Embed OWASP dependency scan into pipeline #12

Closed jackjia-ibm closed 5 years ago

jackjia-ibm commented 5 years ago

As sub-issue of https://github.com/zowe/zowe-install-packaging/issues/406:

The changes should allow the pipeline:

to run OWASP dependency scan per commit on every branch,
to run OWASP dependency scan on daily basis if the repository is not actively developing.

jackjia-ibm commented 5 years ago

Closing this issue with a side Jenkins job created to generate OWASP report. The main reason is the scanning is slow and if we add to each pipeline, it will slow down the build process a lot.