testing

2026-11-05 22:31:22 +01:00
parent d7aff3e5f0
commit b4057e39bb
1 changed files with 21 additions and 0 deletions
--- a/21
+++ b/21
@@ -73,6 +73,27 @@ pipeline {
                '''
            }
        }
+
+        stage('Security scan') {
+            agent {
+                docker {
+                    image 'fast_reader-ci:latest'
+                    reuseNode true
+                }
+            }
+            steps {
+                sh '''
+                    echo "=== Generate SBOM ==="
+                    syft dir:. -o cyclonedx-json=flashread-sbom.json
+
+                    echo "=== Scan SBOM for vulnerabilities ==="
+                    grype sbom:flashread-sbom.json -o table
+                '''
+
+                archiveArtifacts artifacts: 'flashread-sbom.json',
+                                 fingerprint: true
+            }
+        }
    }

    post {