CI-CD

CI/CD Examples

This repository contains tool specific examples of how to deploy the Mend Unified Agent, the Mend CLI and other tools, within a CI/CD pipeline.

• Generic Examples
• Examples by CI/CD Tool
• Additional Tips
  • Caching the Unified Agent
  • Publishing Mend's Logs From a Pipeline
    • Azure DevOps Pipelines
    • GitHub Actions

Note: When scanning using the Mend Unified Agent, ensure first that JDK 8/11 is installed on the pipeline image.

Generic Examples

• Mend CLI
  • SCA and SAST Scan
  • Container/Image Scan
• Unified Agent
  • Policy Check
  • Prioritize

Examples by CI/CD Tool

• AzureDevOps
• Bamboo
• Bitbucket
• CircleCI
• CloudBuild
• CodeBuild
• CodeFresh
• GitHub
• GitLab
• Jenkins
• TeamCity

Additional Tips

Caching the Unified Agent

The best practice with all of the above pipeline integrations is to have the Unified Agent downloaded onto the build's workspace during the build job, so that you always use the latest version.

It is possible to utilize your CI tool's built-in caching functionality, so that you only download the latest version of the agent once every release.

In the following examples, the wss-unified-agent.jar artifact is stored in the pipeline's cache, and the Mend pipeline task first checks whether a newer version of the agent was published since the last time the agent was cached, and if so, it downloads the latest version to be cached instead, before proceeding to the scan itself.

Examples:

• Generic Example
• GitLab Pipelines