GitLab 파이프라인에서 보안 검사 결과를 처리하도록 handleEvent 메서드를 수정합니다. GitLab 파이프라인의 보안 단계 이름이 handleEvent 메서드의 VERACODE_STAGE_NAME, CMARX_ONE_STAGE_NAME 또는 CMARX_SAST_STAGE_NAME 변수에서 업데이트한 이름과 동일한지 확인합니다. handleEvent 메서드 코드를 다음 코드 조각으로 바꿉니다. handleEvent: function(eventGr) {
try {
var renameHandler = new sn_devops.DevOpsPipelineRenameHandler(this.refTable, this.appContext, this.relatedRecord);
renameHandler.handlePipelineRename(eventGr);
var payload = JSON.parse(eventGr.getValue("original_payload"));
this._logger.debug("typeof payload >>" + typeof payload);
if (!gs.nil(payload) && typeof payload === 'object') {
var status = this.getTaskExecutionStatus(payload);
this._logger.debug("Task Execution status -> " + status);
if (gs.nil(status))
this.updateInboundEvent(eventGr, {
processing_details: gs.getMessage('Task execution status [{0}] is not handled', payload.build_status),
state: sn_devops.DevOpsCommonConstants.INBOUND_EVENT_STATE_IGNORED
});
else {
// create fake start event for cancelled job
if (status == 'cancelled') {
this.createFakeEvent(eventGr, payload, 'running');
}
var normalizedObject = {};
normalizedObject.taskExecution = this.getTaskExecutionObject(eventGr, payload, status);
normalizedObject.orchestrationTask = this.getOrchestrationTaskObject(normalizedObject.taskExecution, payload);
normalizedObject.callback = this.getCallbackObject(normalizedObject.taskExecution, payload);
var devopsUtil = new sn_devops.DevOpsUtil(this.refTable, this.appContext, this.relatedRecord);
normalizedObject = devopsUtil.schemaValidationForTransformedPayload(normalizedObject);
var VERACODE_STAGE_NAME = 'SN_VERACODE';
var CMARX_ONE_STAGE_NAME = 'SN_CMARX_ONE_STAGE_NAME';
var CMARX_SAST_STAGE_NAME = 'SN_CMARX_SAST_STAGE_NAME';
if (!gs.nil(payload.build_stage) &&
(
payload.build_stage == VERACODE_STAGE_NAME ||
payload.build_stage == CMARX_ONE_STAGE_NAME ||
payload.build_stage == CMARX_SAST_STAGE_NAME
)
&& this.isCompleted(normalizedObject.taskExecution)) {
var queryParams = sn_devops.DevOpsQueryParamsHelper.convertToSingular(JSON.parse(eventGr.getValue('query_params')));
if (gs.nil(normalizedObject.taskExecution.securityScan)) {
normalizedObject.taskExecution.securityScan = {
securityScanSummaryCount: 0
};
}
normalizedObject.taskExecution.securityScan.securityScanSummaryCount += 1;
}
this._logger.debug("Normalized Object: " + JSON.stringify(normalizedObject));
return JSON.stringify(normalizedObject);
}
} else
this.updateInboundEvent(eventGr, {
processing_details: gs.getMessage('Payload is missing or invalid'),
state: sn_devops.DevOpsCommonConstants.INBOUND_EVENT_STATE_ERROR
});
} catch (error) {
throw sn_devops.DevOpsErrorHelper.createDevOpsScriptIncludeError(error, sn_devops_ints.DevOpsIntegrationsCommonMessages.GITLAB_INBOUND_EVENT_PROCESS_ISSUE, "DevOpsGitLabIntegrationHandler.handleEvent", "handleEvent");
}
},
다음 예에서 GitLab 파이프라인은 보안 단계 이름이 handleEvent 메서드의 VERACODE_STAGE_NAME, CMARX_ONE_STAGE_NAME 또는 CMARX_SAST_STAGE_NAME 변수와 각각 동일함을 보여줍니다.
VERACODE_STAGE_NAME Veracode용입니다.
image: maven:latest
stages:
- build
- SN_VERACODE
- Deploy
build_1:
stage: build
tags:
- local-runner1
script:
- echo "build"
security_test:
stage: SN_VERACODE
tags:
- local-runner1
script:
- |
curl "https://<instance>.service-now.com/api/sn_devops/v1/devops/tool/security?toolId=<gitlab_tool_sys_id> " \
--request POST \
--header "Accept:application/json" \
--header "Content-Type:application/json" \
--data "{
\"pipelineInfo\": {
\"buildNumber\": \"${CI_JOB_ID}\",
\"taskExecutionUrl\": \"${CI_JOB_URL}/\"
},
\"securityResultAttributes\": {
\"scanner\": \"Veracode\",
\"applicationName\": \"Application\"
}
}" \
--user 'devops.system':’password’
CMARX_ONE_STAGE_NAME Checkmarx One용입니다.
image: maven:latest
stages:
- build
- SN_CMARX_ONE_STAGE_NAME
- Deploy
build_1:
stage: build
tags:
- local-runner1
script:
- echo "build"
security_test:
stage: SN_CMARX_ONE_STAGE_NAME
tags:
- local-runner1
script:
- |
curl "https://<instance>.service-now.com/api/sn_devops/v1/devops/tool/security?toolId=<gitlab_tool_sys_id> " \
--request POST \
--header "Accept:application/json" \
--header "Content-Type:application/json" \
--data "{
\"pipelineInfo\": {
\"buildNumber\": \"${CI_JOB_ID}\",
\"taskExecutionUrl\": \"${CI_JOB_URL}/\"
},
\"securityResultAttributes\": {
\"scanner\": \"Checkmarx One\",
\"projectId\": \"projectId\",
\"scanId\": \"scanId\",
}
}" \
--user 'devops.system':’password’
CMARX_SAST_STAGE_NAME Checkmarx SAST를 위한 것입니다.
image: maven:latest
stages:
- build
- SN_CMARX_SAST_STAGE_NAME
- Deploy
build_1:
stage: build
tags:
- local-runner1
script:
- echo "build"
security_test:
stage: SN_CMARX_SAST_STAGE_NAME
tags:
- local-runner1
script:
- |
curl "https://<instance>.service-now.com/api/sn_devops/v1/devops/tool/security?toolId=<gitlab_tool_sys_id> " \
--request POST \
--header "Accept:application/json" \
--header "Content-Type:application/json" \
--data "{
\"pipelineInfo\": {
\"buildNumber\": \"${CI_JOB_ID}\",
\"taskExecutionUrl\": \"${CI_JOB_URL}/\"
},
\"securityResultAttributes\": {
\"scanner\": \"Checkmarx\",
\"projectId\": \"projectId\"
}
}" \
--user 'devops.system':’password’