diff --git a/config.xml b/config.xml index 9101bc67ff26001e89eb979b8cce135c441ca425..fa06f7f5b8e03b1c22c105e214e3a424a729ba17 100644 --- a/config.xml +++ b/config.xml @@ -868,7 +868,6 @@ - HRB_Backend_Dependency_Check @@ -916,7 +915,7 @@ - CHM_Backend_Dependency_Check + CHM_Dependency_Check @@ -940,7 +939,7 @@ - HRA_Backend_Dependency_Check + HRA_Dependency_Check diff --git a/jobs/HRB_Backend_Dependency_Check/config.xml b/jobs/HRB_Backend_Dependency_Check/config.xml new file mode 100644 index 0000000000000000000000000000000000000000..6b13a9247e00fdab5f26311a47203febc6578877 --- /dev/null +++ b/jobs/HRB_Backend_Dependency_Check/config.xml @@ -0,0 +1,79 @@ + + + + 主要是檢查軟體是否有弱洞或者是寫法有問題的第三方工具 +步驟 +1. Delete worksapce +2. Copy all of the files from daily build +3. Run dependency-check then create the report +4. Print report + false + + + + + + + "OWASP ZAP Server" + false + true + false + false + + false + + + HRB_Backend_Daily_Build + + + + + false + + + C:\dependency-check\bin\dependency-check.bat --project %JOB_NAME% -s %WORKSPACE% -f ALL + + + + + + + low + [DependencyCheck] + UTF-8 + false + false + false + false + + + + + + + + + + + + + + + + + + + true + true + false + **/dependency-check-report.xml + + + + + false + + + + + \ No newline at end of file