aboutsummaryrefslogtreecommitdiffstats
path: root/.cirrus.yml
diff options
context:
space:
mode:
authorWouter Admiraal <wouter.admiraal@sonarsource.com>2022-02-21 11:20:20 +0100
committersonartech <sonartech@sonarsource.com>2022-02-22 20:02:46 +0000
commit5fb0f5edafa247fafe76f50f24226528d6774638 (patch)
tree21529cc39fd453c58acd019cb94fec6cfa9f2e3c /.cirrus.yml
parent9c5f06cb4daa67f42ebd228f9d990bd3a0bea87f (diff)
downloadsonarqube-5fb0f5edafa247fafe76f50f24226528d6774638.tar.gz
sonarqube-5fb0f5edafa247fafe76f50f24226528d6774638.zip
[NO JIRA] Remove OWASP SCA tooling
Diffstat (limited to '.cirrus.yml')
-rw-r--r--.cirrus.yml25
1 files changed, 0 insertions, 25 deletions
diff --git a/.cirrus.yml b/.cirrus.yml
index 07458754602..646b360fcde 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -621,31 +621,6 @@ upgd_oracle12_task:
on_failure:
<<: *REPORTS_JUNIT_ON_FAILURE_TEMPLATE
-# Software Composition Analysis (SCA): check potential vulnerabilities in dependencies.
-# Note that license compliance of dependencies is not checked for now.
-owasp_check_task:
- only_if: >-
- $CIRRUS_CRON == "nightly" ||
- $CIRRUS_CRON == "weekly-latest" ||
- $CIRRUS_CRON == "weekly-lts" ||
- changesInclude('private/owasp/*.xml')
- <<: *YARN_CACHE_TEMPLATE
- <<: *GRADLE_CACHE_TEMPLATE
- timeout_in: 30m
- gke_container:
- <<: *GKE_CONTAINER_TEMPLATE
- cpu: 1.7
- memory: 4Gb
- SLACK_WEBHOOK_SQ: ENCRYPTED[dec8e4350cbea3b94d63098558bcb3ae9e79b71c2b6286fcfb9eb80c0953b6448b10f7271b07b5e75e52f362c25d7a8f]
- script:
- - gradle dependencyCheckAggregate
- on_failure:
- slack_notification_script:
- - ./private/cirrus/cirrus-owasp-notification.sh
- always:
- reports_artifacts:
- path: "build/reports/*"
-
ws_scan_task:
only_if: >-
$CIRRUS_CRON == "nightly" ||