Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Policy violations #122

Open
wants to merge 48 commits into
base: master
Choose a base branch
from
Open

Conversation

HagarJNode
Copy link

@HagarJNode HagarJNode commented Aug 30, 2022

I added policy violation to the plugin, so that it can react to the policies that may be configurated in/on the Dependency Track server.

DependencyTrack/dependency-track#1774

New feature:
#130

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • Ensure you have provided tests - that demonstrates feature works or fixes the issue

@HagarJNode
Copy link
Author

I don't know what that "Unable to load component class org.sonar.scanner.rule.QualityProfiles" is all about - I guess it's not from my hands.

@HagarJNode
Copy link
Author

HagarJNode commented Aug 30, 2022

Btw. someone german should take a look on the german texts, as I'm dane and not german.

@HagarJNode
Copy link
Author

I see that the pull request from lsoumille (#113) has the same issue.

mhh added 2 commits January 26, 2023 10:04
# Conflicts:
#	.github/workflows/ci-build.yml
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/ProjectParser.java
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/model/Project.java
@HagarJNode
Copy link
Author

@sephiroth-j any chance you could take a look at my pull request?

@seittema
Copy link

Would love to see this get pulled into the plugin as we are right now needing the ability to fail on policy violations and this would prevent us from doing some workarounds.

@37b
Copy link

37b commented Feb 16, 2023

Would love to see this

Uodate from jenkinsci/dependency-track-plugin
Update from jenkinsci/dependency-track-plugin
@taa-autorola-com
Copy link

This would be great - it would solve a headache for us

mhh and others added 13 commits March 13, 2023 09:14
# Conflicts:
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/ApiClient.java
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/ProjectParser.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/ApiClientTest.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/DependencyTrackPublisherTest.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/DescriptorImplTest.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/JobActionTest.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/ResultActionTest.java
# Conflicts:
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/DescriptorImpl.java
# Conflicts:
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/DependencyTrackPublisher.java
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/model/Component.java
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/model/Finding.java
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/model/RiskGate.java
#	src/main/java/org/jenkinsci/plugins/DependencyTrack/model/Vulnerability.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/DescriptorImplTest.java
#	src/test/java/org/jenkinsci/plugins/DependencyTrack/FindingParserTest.java
@dennisverheijen
Copy link

We also have need for the ability to fail the build on a policy violation, any updates?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants