Jenkinsfile

pipeline {
    agent any
    tools {
        jdk 'jdk17'
        nodejs 'node16'
    }
    environment {
        SCANNER_HOME = tool 'sonar-scanner'
    }
    stages {
        stage('clean workspace') {
            steps {
                cleanWs()
            }
        }
        stage('Checkout from Git') {                        
            steps {                                       
                git branch: 'main', url: 'https://github.com/yash509/DevSecOps-Project.git'
            }
        }
        stage('Deployments') {
            parallel {
                stage('deploy to staging') {
                    steps {
                        echo 'staging deployment done'
                    }
                }
                stage('deploy to production') {
                    steps {
                        echo 'production deployment done'
                    }
                }
            }
        }
        stage('Test Build') {
            steps {
                echo 'Building....'
            }
            post {
                always {
                    jiraSendBuildInfo site: 'clouddevopshunter.atlassian.net'
                }
            }
        }
        stage('Deploy - Staging') {
            when {
                branch 'master'
            }
            steps {
                echo 'Deploying to Staging from main....'
            }
            post {
                always {
                    jiraSendDeploymentInfo environmentId: 'us-stg-1', environmentName: 'us-stg-1', environmentType: 'staging'
                }
            }
        }
        stage('Deploy - Production') {
            when {
                branch 'master'
            }
            steps {
                echo 'Deploying to Production from main....'
            }
            post {
                always {
                    jiraSendDeploymentInfo environmentId: 'us-prod-1', environmentName: 'us-prod-1', environmentType: 'production'
                }
            }
        }
        stage("Sonarqube Analysis ") {                         
            steps {
                dir('BMI Calculator (JS)') {
                    withSonarQubeEnv('sonar-server') {
                    sh '''$SCANNER_HOME/bin/sonar-scanner -Dsonar.projectName=bmi \
                    -Dsonar.projectKey=bmi'''
                    }
                }
            }
        }
        stage("quality gate") {
            steps {
                dir('BMI Calculator (JS)') {
                    script {
                        waitForQualityGate abortPipeline: false, credentialsId: 'Sonar-token'
                        
                    }
                }
            }
        }
        stage('Install Dependencies') {
            steps {
                dir('BMI Calculator (JS)') {
                    sh "npm install"
                }
            }
        }
        stage('OWASP FS SCAN') {
            steps {
                dir('BMI Calculator (JS)') {
                dependencyCheck additionalArguments: '--scan ./ --disableYarnAudit --disableNodeAudit', odcInstallation: 'DP-Check'
                dependencyCheckPublisher pattern: '**/dependency-check-report.xml'
                }
            }
        }
        stage('TRIVY FS SCAN') {
            steps {
                dir('BMI Calculator (JS)') {
                    sh "trivy fs . > trivyfs.txt"
                }
            }
        }
        stage("Docker Image Building"){
            steps{
                script{
                    dir('BMI Calculator (JS)') {
                        withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){   
                            sh "docker build -t bmi-js ." 
                            
                        }
                    }
                }
            }
        }
        stage("Docker Image Tagging"){
            steps{
                script{
                    dir('BMI Calculator (JS)') {
                        withDockerRegistry(credentialsId: 'docker', toolName: 'docker'){
                            sh "docker tag bmi-js yash5090/bmi-js:latest " 
                        }
                    }
                }
            }
        }
        stage("Image Push to DockerHub") {
            steps{
                script{
                    dir('BMI Calculator (JS)') {
                        withDockerRegistry(credentialsId: 'docker', toolName: 'docker') {
                            sh "docker push yash5090/bmi-js:latest "
                        }
                    }
                }
            }
        }
        stage("TRIVY"){
            steps{
                dir('BMI Calculator (JS)') {
                    sh "trivy image yash5090/bmi-js:latest > trivyimage.txt"   
                }
            }
        }
        stage ('Manual Approval'){
          steps {
           script {
             timeout(time: 10, unit: 'MINUTES') {
              approvalMailContent = """
              Project: ${env.JOB_NAME}
              Build Number: ${env.BUILD_NUMBER}
              Go to build URL and approve the deployment request.
              URL de build: ${env.BUILD_URL}
              """
             mail(
             to: 'clouddevopshunter@gmail.com',
             subject: "${currentBuild.result} CI: Project name -> ${env.JOB_NAME}", 
             body: approvalMailContent,
             mimeType: 'text/plain'
             )
            input(
            id: "DeployGate",
            message: "Deploy ${params.project_name}?",
            submitter: "approver",
            parameters: [choice(name: 'action', choices: ['Deploy'], description: 'Approve deployment')])  
            }
           }
          }
        }
        stage('Deploy to container'){
            steps{
                dir('BMI Calculator (JS)') {
                    sh 'docker run -d --name bmi-js -p 5000:80 yash5090/bmi-js:latest' 
                }
            }
        }
        stage('Deployment Done') {
            steps {
                echo 'Deployed Succcessfully...'
            }
        }
    }
    post {
        always {
            emailext attachLog: true,
            subject: "'${currentBuild.result}'",
            body: "Project: ${env.JOB_NAME}<br/>" +
            "Build Number: ${env.BUILD_NUMBER}<br/>" + 
            "URL: ${env.BUILD_URL}<br/>",
            to: 'clouddevopshunter@gmail.com',
            attachmentsPattern: 'trivyfs.txt,trivyimage.txt'
        }
    }
}
    stage('Result') {
        timeout(time: 10, unit: 'MINUTES') {
            mail to: 'clouddevopshunter@gmail.com',
            subject: "${currentBuild.result} CI: ${env.JOB_NAME}",
            body: "Project: ${env.JOB_NAME}\nBuild Number: ${env.BUILD_NUMBER}\nGo to ${env.BUILD_URL} and approve deployment"
            input message: "Deploy ${params.project_name}?", 
            id: "DeployGate", 
            submitter: "approver", 
            parameters: [choice(name: 'action', choices: ['Success'], description: 'Approve deployment')]
        }
    }