-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathJenkinsfile
97 lines (89 loc) · 2.57 KB
/
Jenkinsfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
pipeline {
agent { label ' jenlins-agent ' }
tools {
jdk 'Java17'
maven 'Maven3'
}
environment {
APP_NAME = "net-pipeline"
RELEASE = "1.0.0"
DOCKER_USER = "kushal9897"
DOCKER_PASS = 'dockerhub'
IMAGE_NAME = "${DOCKER_USER}" + "/" + "${APP_NAME}"
IMAGE_TAG = "${RELEASE}-${BUILD_NUMBER}"
JENKINS_API_TOKEN = credentials("JENKINS_API_TOKEN")
}
stages {
stage("Cleanup Workspace"){
steps {
cleanWs ()
}
}
stage("Checkout from SCM"){
steps {
git branch: 'main' , credentialsId: 'github' , url: 'https://github.com/kushal9897/net.git'
}
}
stage ("Build Application" ) {
steps{
sh "mvn clean package"
}
}
stage("Test Application" ) {
steps {
sh "mvn test "
}
}
stage("SonarQube Analysis"){
steps {
script{
withSonarQubeEnv(credentialsId: 'jenlins-sonarqube-token') {
sh "mvn sonar:sonar"
}
}
}
}
stage("Quality Gate"){
steps{
script {
waitForQualityGate abortPipeline: false, credentialsId: 'jenlins-sonarqube-token'
}
}
}
stage("Build & Push Docker Image"){
steps{
script{
docker.withRegistry('',DOCKER_PASS){
docker_image = docker.build "${IMAGE_NAME}"
}
docker.withRegistry('',DOCKER_PASS){
docker_image.push("${IMAGE_TAG}")
docker_image.push('latest')
}
}
}
}
stage("Trivy Scan") {
steps {
script {
sh ('docker run -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy image kushal9897/net-pipeline:latest --no-progress --scanners vuln --exit-code 0 --severity HIGH,CRITICAL --format table')
}
}
}
stage ('Cleanup Artifacts') {
steps {
script {
sh "docker rmi ${IMAGE_NAME}:${IMAGE_TAG}"
sh "docker rmi ${IMAGE_NAME}:latest"
}
}
}
stage("Trigger CD Pipeline") {
steps {
script {
sh "curl -v -k --user clouduser:${JENKINS_API_TOKEN} -X POST -H 'cache-control: no-cache' -H 'content-type: application/x-www-form-urlencoded' --data 'IMAGE_TAG=${IMAGE_TAG}' 'ec2-16-16-185-112.eu-north-1.compute.amazonaws.com:8080/job/gitops-net-cd/buildWithParameters?token=gitops-token'"
}
}
}
}
}