diff --git a/.travis.yml b/.travis.yml index 4714b39982..383a32bb27 100644 --- a/.travis.yml +++ b/.travis.yml @@ -145,8 +145,7 @@ jobs: - name: "Source Clear Scan (SCA)" stage: Security Scans - script: - - echo "Source Clear Scan (SCA)" + script: travis_wait 30 bash scripts/source_clear.sh - name: "Static Analysis (SAST)" stage: Security Scans script: diff --git a/scripts/source_clear.sh b/scripts/source_clear.sh new file mode 100644 index 0000000000..85576d3ad1 --- /dev/null +++ b/scripts/source_clear.sh @@ -0,0 +1,16 @@ +#!/usr/bin/env bash +# fail script immediately on any errors in external commands and print the lines +set -ev + +mvn -B -q clean install \ + -DskipTests \ + -Dmaven.javadoc.skip=true \ + -pl '!rm-automation,!rm-automation/rm-automation-community-rest-api,!rm-automation/rm-automation-enterprise-rest-api,!rm-automation/rm-automation-ui,!rm-benchmark' \ + com.srcclr:srcclr-maven-plugin:scan \ + -Dcom.srcclr.apiToken=$SRCCLR_API_TOKEN > scan.log + +SUCCESS=$? # this will read exit code of the previous command + +cat scan.log | grep -e 'Full Report Details' -e 'Failed' + +exit ${SUCCESS}