diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index f779656..7a9a1f6 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1 +1,2 @@ * @jenkinsci/.-plugin-developers +* @jenkinsci/vigilnz-security-plugin-developers \ No newline at end of file diff --git a/.github/release-drafter.yml b/.github/release-drafter.yml deleted file mode 100644 index 23091bd..0000000 --- a/.github/release-drafter.yml +++ /dev/null @@ -1,4 +0,0 @@ -# See https://github.com/jenkinsci/.github/blob/master/.github/release-drafter.adoc ---- -_extends: .github -tag-template: .-$NEXT_MINOR_VERSION diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml new file mode 100644 index 0000000..0090619 --- /dev/null +++ b/.github/workflows/cd.yaml @@ -0,0 +1,54 @@ +# Note: additional setup is required, see https://www.jenkins.io/redirect/continuous-delivery-of-plugins +# +# Please find additional hints for individual trigger use case +# configuration options inline this script below. +# +--- +name: cd +on: + workflow_dispatch: + inputs: + validate_only: + required: false + type: boolean + description: | + Run validation with release drafter only + → Skip the release job + # Note: Change this default to true, + # if the checkbox should be checked by default. + default: false + # If you don't want any automatic trigger in general, then + # the following check_run trigger lines should all be commented. + # Note: Consider the use case #2 config for 'validate_only' below + # as an alternative option! + check_run: + types: + - completed + +permissions: + checks: read + contents: write + +jobs: + maven-cd: + uses: jenkins-infra/github-reusable-workflows/.github/workflows/maven-cd.yml@v1 + with: + # Comment / uncomment the validate_only config appropriate to your preference: + # + # Use case #1 (automatic release): + # - Let any successful Jenkins build trigger another release, + # if there are merged pull requests of interest + # - Perform a validation only run with drafting a release note, + # if manually triggered AND inputs.validate_only has been checked. + # + validate_only: ${{ inputs.validate_only == true }} + # + # Alternative use case #2 (no automatic release): + # - Same as use case #1 - but: + # - Let any check_run trigger a validate_only run. + # => enforce the release job to be skipped. + # + #validate_only: ${{ inputs.validate_only == true || github.event_name == 'check_run' }} + secrets: + MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }} + MAVEN_TOKEN: ${{ secrets.MAVEN_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml deleted file mode 100644 index 1c5047b..0000000 --- a/.github/workflows/release-drafter.yml +++ /dev/null @@ -1,19 +0,0 @@ -# Automates creation of Release Drafts using Release Drafter -# More Info: https://github.com/jenkinsci/.github/blob/master/.github/release-drafter.adoc ---- -name: Release Drafter - -on: - push: - branches: - - master - - main - -jobs: - update_release_draft: - runs-on: ubuntu-latest - steps: - # Drafts your next Release notes as Pull Requests are merged into the default branch - - uses: release-drafter/release-drafter@v6 - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.mvn/maven.config b/.mvn/maven.config index 2a0299c..61cf4e5 100644 --- a/.mvn/maven.config +++ b/.mvn/maven.config @@ -1,2 +1,3 @@ -Pconsume-incrementals -Pmight-produce-incrementals +-Dchangelist.format=%d.v%s \ No newline at end of file diff --git a/pom.xml b/pom.xml index c3e42d0..1aa9d71 100644 --- a/pom.xml +++ b/pom.xml @@ -17,7 +17,9 @@ Vigilnz Security - Vigilnz Security Plugin integrates security scanning capabilities into Jenkins. Run CVE, SAST, SBOM, and other security scans as part of your CI/CD pipeline. + Vigilnz Security Plugin integrates security scanning capabilities into Jenkins. Run CVE, SAST, SBOM, + and other security scans as part of your CI/CD pipeline. + https://github.com/${gitHubRepo} @@ -32,18 +34,18 @@ ${scmTag} https://github.com/${gitHubRepo} - - - - vigilnz - Vigilnz Team - support@vigilnz.com - - + + + + + + + + 1.0 - + 999999-SNAPSHOT 2.516 ${jenkins.baseline}.3 @@ -52,7 +54,6 @@ false false true - jackson-annotations,jackson-core,jackson-databind @@ -60,7 +61,7 @@ io.jenkins.tools.bom bom-${jenkins.baseline}.x - 5659.vecf9e2dc5a_ed + 5750.vec44cb_c78352 pom import @@ -87,7 +88,7 @@ org.jenkins-ci.plugins credentials - 1337.v60b_d7b_c7b_c9f + @@ -112,10 +113,15 @@ provided + + + + + + - com.fasterxml.jackson.core - jackson-databind - 2.20.1 + org.jenkins-ci.plugins + jackson2-api