After checking with legal, it was agreed to not
allow tech teams to provide their own
wss-unified-agent.config file for WhiteSource scans.
Instead, this file should be managed in Jenkins Settings
Files
Change-Id: I20e330794ba28cb4c0f5206c290a734c1794b00e
Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>
- builder:
name: lf-infra-wss-unified-agent-scan
builders:
- builder:
name: lf-infra-wss-unified-agent-scan
builders:
+ - config-file-provider:
+ files:
+ - file-id: wss-unified-agent.config
+ target: $WORKSPACE/wss-unified-agent.config
- shell: !include-raw:
- ../shell/whitesource-unified-agent-cli.sh
- shell: !include-raw:
- ../shell/whitesource-unified-agent-cli.sh
name: WSS_PRODUCT_NAME
default: '{wss-product-name}'
description: Product to asociate the WhiteSource report in the dashboard.
name: WSS_PRODUCT_NAME
default: '{wss-product-name}'
description: Product to asociate the WhiteSource report in the dashboard.
- - string:
- name: WSS_UNIFIED_AGENT_CONFIG
- default: '{wss-unified-agent-config}'
- description: Path to wss-unifed-agent.config
- string:
name: WSS_UNIFIED_AGENT_OPTIONS
default: '{wss-unified-agent-opts}'
- string:
name: WSS_UNIFIED_AGENT_OPTIONS
default: '{wss-unified-agent-opts}'
--- /dev/null
+---
+fixes:
+ - wss-unified-agent.config file should not be opened
+ for configuration to tech teams. The config file should
+ be part of Jenkins Settings Files and called via Managed
+ Files.
+ wss-unified-agent.config must be created in Jenkins config
+ files based on wss-unified-agent.config.example.
wget -nv https://s3.amazonaws.com/unified-agent/wss-unified-agent-$WSS_UNIFIED_AGENT_VERSION.jar \
-O $jar_location
echo "---> Running WhiteSource Unified Agent CLI ..."
wget -nv https://s3.amazonaws.com/unified-agent/wss-unified-agent-$WSS_UNIFIED_AGENT_VERSION.jar \
-O $jar_location
echo "---> Running WhiteSource Unified Agent CLI ..."
-java -jar $jar_location -c $WSS_UNIFIED_AGENT_CONFIG \
+java -jar $jar_location -c wss-unified-agent.config \
-product $WSS_PRODUCT_NAME -project $WSS_PROJECT_NAME \
${WSS_UNIFIED_AGENT_OPTIONS:-}
rm $jar_location
-product $WSS_PRODUCT_NAME -project $WSS_PROJECT_NAME \
${WSS_UNIFIED_AGENT_OPTIONS:-}
rm $jar_location