Jenkinsfile (790B)
1 @Library('in0rdr-jenkins-lib@master') _ 2 3 def updatecli = new Updatecli(this) 4 def trivy = new Trivy(this) 5 def buildahbud = new BuildahBud(this) 6 def buildahpush = new BuildahPush(this) 7 8 // https://plugins.jenkins.io/hashicorp-vault-plugin/#user-content-usage-via-jenkinsfile 9 def secrets = [ 10 [path: 'kv/jenkins-secrets/git', secretValues: [ 11 [envVar: 'GIT_USERNAME', vaultKey: 'username'], 12 [envVar: 'GIT_PASSWORD', vaultKey: 'password'] 13 ]] 14 ] 15 16 node('podman'){ 17 scmVars = checkout(scm) 18 gitleaks() 19 20 withVault([vaultSecrets: secrets]) { 21 updatecli.run('apply') 22 trivy.vuln() 23 trivy.sbom() 24 } 25 26 // build with image context and name 27 buildahbud.execute([:], '.', 'hivedav', "${scmVars.GIT_COMMIT}") 28 buildahpush.execute('hivedav', "${scmVars.GIT_COMMIT}") 29 }