diff --git a/.travis.yml b/.travis.yml index fbe453e383..c360fb178b 100644 --- a/.travis.yml +++ b/.travis.yml @@ -43,6 +43,11 @@ install: travis_retry travis_wait 40 bash scripts/travis/build.sh jobs: include: + - name: "Source Clear Scan (SCA)" + if: branch = master OR branch =~ /release\/.*/ + # Run Veracode + install: skip + script: travis_wait 30 bash scripts/travis/source_clear.sh - name: "Core, Data-Model, Repository - AllUnitTestsSuite - Build and test" if: commit_message !~ /\[skip repo\]/ diff --git a/scripts/travis/source_clear.sh b/scripts/travis/source_clear.sh new file mode 100755 index 0000000000..babb8e7f3e --- /dev/null +++ b/scripts/travis/source_clear.sh @@ -0,0 +1,26 @@ +#!/usr/bin/env bash + +echo "=========================== Starting SourceClear Script ===========================" +PS4="\[\e[35m\]+ \[\e[m\]" +set +e -v -x +pushd "$(dirname "${BASH_SOURCE[0]}")/../../" + +mvn -B -q clean install \ + -DskipTests \ + -Dmaven.javadoc.skip=true \ + com.srcclr:srcclr-maven-plugin:scan \ + -Dcom.srcclr.apiToken=${SRCCLR_API_TOKEN} > scan.log + +SUCCESS=$? # this will read exit code of the previous command + +if [ -z "$VERACODE_FAILS_BUILD" ] || [ "$VERACODE_FAILS_BUILD" = false ] ; then + SUCCESS=0 +fi + +cat scan.log | grep -e 'Full Report Details' -e 'Failed' + +popd +set +vex +echo "=========================== Finishing SourceClear Script ==========================" + +exit ${SUCCESS} \ No newline at end of file