JenkinsfileWindows

// Windows based Jenkins file that automates Veracode SCA and Pipeline scan. 
// Script is based off of documentation (https://help.veracode.com/reader/tS9CaFwL4_lbIEWWomsJoA/MVXQBY1PzfrTXGd6V~ZgxA) 
// and has been converted to work on a Windows based Jenkins machine. 
// Add a SRCCLR_API_TOKEN and VERACODE_API_ACCOUNT API ID/KEY.
// Stores results.json file


pipeline {
    agent any

	stages 
	{
        stage('Build') {
            steps {
                echo 'Building..'
				powershell 'mvn package'
            }
		}
		
		stage('SCA') {
		environment {
			SRCCLR_API_TOKEN = credentials('SRCCLR_API_TOKEN')
			}
			steps {
				powershell """
                  Set-ExecutionPolicy AllSigned -Scope Process -Force
                  iex ((New-Object System.Net.WebClient).DownloadString('https://download.srcclr.com/ci.ps1')) 
                  srcclr scan .
		        """
        	}
		}
		 
		stage('Veracode Pipeline Scan') {
		environment {
			SERVICE_CREDS = credentials('VERACODE_API_ACCOUNT')
			}
		    
			steps {	
				powershell """
				curl  https://downloads.veracode.com/securityscan/pipeline-scan-LATEST.zip -o pipeline-scan.zip
				Expand-Archive -Force -Path pipeline-scan.zip -DestinationPath veracode_scanner
				java -jar veracode_scanner\\pipeline-scan.jar --veracode_api_id '${SERVICE_CREDS_USR}' \
				--veracode_api_key '${SERVICE_CREDS_PSW}' \
				--file target/verademo.war \
				--fail_on_cwe "1234" // can fail on flaw cwe or severity. Reference: https://help.veracode.com/reader/tS9CaFwL4_lbIEWWomsJoA/zjaZE08bAYZVPBWWbgmZvw
				"""
			}
		}
		
        stage('Deploy') {
            steps {
                echo 'Deploying....'
            }
        }
    }
	post {
	    always {
	      archiveArtifacts artifacts: 'results.json', fingerprint: true
	    }
	}
}