Merge pull request #167 from corona-warn-app/oemerb-patch-1

WhiteSource pipeline integration

.pipeline/config.yml

@@ -32,3 +32,10 @@ steps:
     protecodeServerUrl: 'https://protecode.c.eu-de-2.cloud.sap'
     protecodeGroup: 1071
     protecodeTimeoutMinutes: 80
+  # Configuration for WhiteSource Scan
+  executeWhitesourceScan:
+    whitesourceUserTokenCredentialsId: 'ux-mcoe-whitesource'
+    whitesourceProductName: 'DIST - MOB CORONA-WARN IOS 1.0'
+    whitesourceProductToken: '04245b8552354b76b17fe19aa4ce479d77b9180a2b3247f7b3727798eb86f764'
+    scanType: 'unifiedAgent'
+    configFilePath: './wss-unified-agent.config'

Jenkinsfile

@@ -42,6 +42,12 @@ try {
 				   executeProtecodeScan script: this, fetchUrl : nexusFetchUrl
 			  	}
 			}
+			lock(resource: "${env.JOB_NAME}/50", inversePrecedence: true) {
+				milestone 50
+				stage('WhiteSource Scan') {
+					executeWhitesourceScan script: this, scanType: 'unifiedAgent'
+			  	}
+			}
 		}
 	}
 } catch (Throwable err) { // catch all exceptions

wss-unified-agent.config

@@ -0,0 +1,46 @@
+###############################################################
+# WhiteSource Unified-Agent configuration file
+###############################################################
+# GENERAL SCAN MODE: Files and Package Managers
+###############################################################
+# Organization vitals
+######################
+
+apiKey=6971b2eec2d3420bad0caf173ec629f6a3c7d3ba63f3445ab99ffdbf1acfb1d0
+
+projectName= CORONA-WARN IOS
+projectVersion= 0.0.1
+
+productName= DIST - MOB CORONA-WARN IOS
+productVersion= 1.0
+productToken=04245b8552354b76b17fe19aa4ce479d77b9180a2b3247f7b3727798eb86f764
+
+# Change the below URL to your WhiteSource server.
+# Use the 'WhiteSource Server URL' which can be retrieved
+# from your 'Profile' page on the 'Server URLs' panel.
+# Then, add the '/agent' path to it.
+wss.url=https://saas.whitesourcesoftware.com/agent
+
+############
+# Policies #
+############
+checkPolicies=false
+forceCheckAllDependencies=false
+forceUpdate=false
+forceUpdate.failBuildOnPolicyViolation=false
+#updateInventory=false
+
+###########
+# General #
+###########
+ignoreSourceFiles=false
+
+###########################################################################################
+# Includes/Excludes Glob patterns - Please use only one exclude line and one include line #
+###########################################################################################
+includes=**/*.swift
+
+excludes=**/*sources.jar **/*javadoc.jar
+
+case.sensitive.glob=false
+followSymbolicLinks=true