diff --git a/.circleci/config.yml b/.circleci/config.yml new file mode 100644 index 0000000..d20caa5 --- /dev/null +++ b/.circleci/config.yml @@ -0,0 +1,46 @@ +version: 2.1 + +executors: + java: + description: "A regular executor based on openjdk image" + docker: + - image: circleci/openjdk:8-jdk + +jobs: + whitesource-scan: + executor: java + + steps: + - checkout + + - run: + name: Install pip + command: | + sudo apt-get update + sudo apt-get install -y python-pip + - run: + name: Download latest WhiteSource Unified Agent + command: curl -LJO https://github.com/whitesource/unified-agent-distribution/releases/latest/download/wss-unified-agent.jar + - run: + name: Run WhiteSource scan + command: java -jar wss-unified-agent.jar -d ~/project -c ~/project/wss-unified-agent.config -apiKey ${API_KEY} + - store_artifacts: + path: ~/project/whitesource + +workflows: + version: 2 + commit: + jobs: + - whitesource-scan: + context: whitesource + security-scan: + triggers: + - schedule: + cron: "0 1 * * 0" + filters: + branches: + only: + master + jobs: + - whitesource-scan: + context: whitesource diff --git a/wss-unified-agent.config b/wss-unified-agent.config new file mode 100644 index 0000000..f246f27 --- /dev/null +++ b/wss-unified-agent.config @@ -0,0 +1,46 @@ +############################################################### +# WhiteSource Unified-Agent configuration file +############################################################### +# GENERAL SCAN MODE: Files and Package Managers +############################################################### +# Organization vitals +###################### + +projectToken=38bb21f384f446e9b914ad3c816abcdbddce46a489fb4560a0caee42f661fef0 + +# Change the below URL to your WhiteSource server. +# Use the 'WhiteSource Server URL' which can be retrieved +# from your 'Profile' page on the 'Server URLs' panel. +# Then, add the '/agent' path to it. +wss.url=https://app.whitesourcesoftware.com/agent + +############ +# Policies # +############ +checkPolicies=true +forceCheckAllDependencies=false +forceUpdate=false +forceUpdate.failBuildOnPolicyViolation=false +#updateInventory=false + +########### +# General # +########### +#log.level=debug + +######################################## +# Package Manager Dependency resolvers # +######################################## +python.installVirtualenv=true + + +########################################################################################### +# Includes/Excludes Glob patterns - Please use only one exclude line and one include line # +########################################################################################### +includes=**/*.zip **/*.tar.gz **/*.egg **/*.whl **/*.py + +#Exclude file extensions or specific directories by adding **/*. or **//** +excludes=**/*sources.jar **/*javadoc.jar + +case.sensitive.glob=false +followSymbolicLinks=true