diff --git a/azure-pipelines.yml b/azure-pipelines.yml new file mode 100644 index 00000000..f66362c3 --- /dev/null +++ b/azure-pipelines.yml @@ -0,0 +1,73 @@ +pool: + vmImage: ubuntu-latest + +jobs: +- job: build + displayName: 'Build' + steps: + - task: Maven@3 + inputs: + mavenPomFile: 'pom.xml' + publishJUnitResults: true + testResultsFiles: '**/TEST-*.xml' + javaHomeOption: 'JDKVersion' + sonarQubeRunAnalysis: false + - task: CopyFiles@2 + inputs: + sourceFolder: '$(Build.SourcesDirectory)' + contents: | + **/target/*.jar + targetFolder: '$(Build.ArtifactStagingDirectory)' + - task: PublishBuildArtifacts@1 + inputs: + pathToPublish: '$(Build.ArtifactStagingDirectory)' + artifactName: appJar + publishLocation: 'Container' + +- job: sonar + workspace: + clean: all + displayName: Code Review + steps: + - task: SonarCloudPrepare@1 + inputs: + SonarCloud: 'Lab-SAST-DevSecOps' + organization: 'devsecopslab1' + projectKey: 'julianks_spring-boot-kubernetes' + projectName: 'spring-boot-kubernetes' + displayName: 'Preparing Sonarqube Environment' + - task: Maven@3 + inputs: + mavenPomFile: 'pom.xml' + publishJUnitResults: true + testResultsFiles: '**/surefire-reports/TEST-*.xml' + javaHomeOption: 'JDKVersion' + mavenVersionOption: 'Default' + mavenAuthenticateFeed: false + effectivePomSkip: false + sonarQubeRunAnalysis: true + sqMavenPluginVersionChoice: 'latest' + - task: SonarCloudPublish@1 + inputs: + pollingTimeoutSec: '300' + displayName: 'Publish Analysis Results' + + #- task: sonarcloud-buildbreaker@2 + # inputs: + # SonarCloud: 'Sonarcloud' + # organization: 'devsecops-usach' + +- job: SCA + dependsOn: build + steps: + - task: DownloadBuildArtifacts@0 + inputs: + buildType: 'current' + downloadType: 'single' + artifactName: 'appJar' + downloadPath: '$(System.ArtifactsDirectory)' + - task: dependency-check-build-task@6 + inputs: + projectName: 'spring-boot' + scanPath: '$(System.ArtifactsDirectory)' + format: 'HTML' diff --git a/src/main/java/org/soyphea/k8s/K8SApplication.java b/src/main/java/org/soyphea/k8s/K8SApplication.java index 2982ec55..2556d6cc 100644 --- a/src/main/java/org/soyphea/k8s/K8SApplication.java +++ b/src/main/java/org/soyphea/k8s/K8SApplication.java @@ -11,7 +11,6 @@ @Slf4j public class K8SApplication implements CommandLineRunner { - @Autowired UserConfig userConfig; diff --git a/src/main/java/org/soyphea/k8s/config/UserConfig.java b/src/main/java/org/soyphea/k8s/config/UserConfig.java index 925d2ecf..5aab719a 100644 --- a/src/main/java/org/soyphea/k8s/config/UserConfig.java +++ b/src/main/java/org/soyphea/k8s/config/UserConfig.java @@ -16,4 +16,5 @@ public class UserConfig { String name; String blog; + }