REQ 022

REQ-022: Full DT mode fails closed before any checkout on an unreachable backend

Requirement

full Dependency-Track reporting mode shall fail the entire pipeline run before any project's checkout starts if DEPENDENCY_TRACK_URL is not an absolute HTTPS URL or does not answer a real preflight request.

Rationale

Avoids wasting a full checkout/build/scan cycle only to fail at the final publish step for a misconfigured or unreachable reporting backend.

Fit Criterion

Test-DependencyTrackReadiness performs a live GET .../api/openapi.json request and throws before Run-Pipeline.ps1's per-project loop begins if that request fails or returns no API paths.

Verification

Code review of Build-Sbom.ps1's Test-DependencyTrackReadiness/Resolve-DependencyTrackPolicy functions.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-022

TestArtifact

Code review of the live OpenAPI preflight request

CodeRef

Build-Sbom.ps1 Test-DependencyTrackReadiness module

Status

Verified (manual)