[LOG-7228] Include repo to ws scan

.circleci/config.yml

@@ -0,0 +1,46 @@
+version: 2.1
+
+executors:
+  java:
+    description: "A regular executor based on openjdk image"
+    docker:
+      - image: circleci/openjdk:8-jdk
+
+jobs:
+  whitesource-scan:
+    executor: java
+
+    steps:
+      - checkout
+
+      - run:
+          name: Install pip
+          command: |
+            sudo apt-get update
+            sudo apt-get install -y python-pip
+      - run:
+          name: Download latest WhiteSource Unified Agent
+          command: curl -LJO https://github.com/whitesource/unified-agent-distribution/releases/latest/download/wss-unified-agent.jar
+      - run:
+          name: Run WhiteSource scan
+          command: java -jar wss-unified-agent.jar -d ~/project -c ~/project/wss-unified-agent.config -apiKey	${API_KEY}
+      - store_artifacts:
+          path: ~/project/whitesource
+
+workflows:
+  version: 2
+  commit:
+    jobs:
+      - whitesource-scan:
+          context: whitesource
+  security-scan:
+    triggers:
+      - schedule:
+          cron: "0 1 * * 0"
+          filters:
+            branches:
+              only:
+                master
+    jobs:
+      - whitesource-scan:
+          context: whitesource

wss-unified-agent.config

@@ -0,0 +1,45 @@
+###############################################################
+# WhiteSource Unified-Agent configuration file
+###############################################################
+# GENERAL SCAN MODE: Files and Package Managers
+###############################################################
+# Organization vitals
+######################
+
+projectToken=b1ff0bfa17a3414ba02e04689ccb8231098e1d03c58d4feba271bc19638065d2
+
+# Change the below URL to your WhiteSource server.
+# Use the 'WhiteSource Server URL' which can be retrieved
+# from your 'Profile' page on the 'Server URLs' panel.
+# Then, add the '/agent' path to it.
+wss.url=https://app.whitesourcesoftware.com/agent
+
+############
+# Policies #
+############
+checkPolicies=true
+forceCheckAllDependencies=false
+forceUpdate=false
+forceUpdate.failBuildOnPolicyViolation=false
+#updateInventory=false
+
+###########
+# General #
+###########
+#log.level=debug
+
+########################################
+# Package Manager Dependency resolvers #
+########################################
+
+
+###########################################################################################
+# Includes/Excludes Glob patterns - Please use only one exclude line and one include line #
+###########################################################################################
+includes=**/*.zip **/*.tar.gz **/*.egg **/*.whl **/*.py
+
+#Exclude file extensions or specific directories by adding **/*.<extension> or **/<excluded_dir>/**
+excludes=**/*sources.jar **/*javadoc.jar
+
+case.sensitive.glob=false
+followSymbolicLinks=true