Skip to content

Commit

Permalink
Merge pull request #529 from amousset/arch_22221/skip_npm_dependency_…
Browse files Browse the repository at this point in the history
…check_on_plugins_without_elm

Fixes #22221: Skip npm dependency check on plugins without elm
  • Loading branch information
amousset committed Dec 29, 2022
2 parents edd08b8 + 0547175 commit bb98f99
Showing 1 changed file with 7 additions and 3 deletions.
10 changes: 7 additions & 3 deletions Jenkinsfile-security
Original file line number Diff line number Diff line change
Expand Up @@ -29,9 +29,13 @@ pipeline {
dir("${it}") {
sh script: 'make generate-pom', label: 'generate pom.xml'
sh script: 'mvn -U -DsuppressionFiles=../dependency-check-suppression.xml -DskipProvidedScope=true -DfailBuildOnCVSS=7 -DcveValidForHours=48 org.owasp:dependency-check-maven:aggregate', label: "check plugins dependencies"
dir("src/main") {
sh script: 'npm_config_loglevel=error npm ci --no-audit', label: "install dependencies"
sh script: 'npx better-npm-audit audit --level high', label: "check npm dependencies"
script {
if (fileExists('src/main/package.json')) {
dir("src/main") {
sh script: 'npm_config_loglevel=error npm ci --no-audit', label: "install dependencies"
sh script: 'npx better-npm-audit audit --level high', label: "check npm dependencies"
}
}
}
sh script: 'mvn -U license:aggregate-third-party-report', label: 'list ${it} dependencies'
}
Expand Down

0 comments on commit bb98f99

Please sign in to comment.