I have Controller and workers are 16.10. SCA in Jenkins I have 3.5 version.
Will I still be able to submit the job from Jenkins to Cloud scan?
Regarding build Id, from Jenkins I have to execute the maven command
mentioning build Id and the same has to be used in Cloud scan configuration
right?
mvn com.hpe.security.fortify.maven.plugin:maven-sca-plugin:translate
Thanks,
Vin
On Monday, June 20, 2016 at 2:50:09 PM UTC-7, Steve Springett wrote:
>
> Vin,
>
> It’s been several years since I’ve used Fortify SCA 3.x, but in general,
> if you send a job to the Cloudscan controller (16.10 in your case), you’ll
> need a corresponding Cloudscan worker to process the job (3.5 in your
> case). The Cloudscan Jenkins plugin is simply a wrapper around the
> cloudscan executable distributed with Fortify - makes it much simpler to
> configure and maintain jobs. So if you’re able to perform a Cloudscan job
> from the command line, you’ll be able to do it with the Jenkins plugin. If
> you’re unable to do it from the command line, the Jenkins plugin won’t be
> able to either.
>
> Starting with Fortify 4.30 (I think), Cloudscan was included with the
> standard SCA distribution. Prior to that and users had to setup each SCA
> installation individually as a Cloudscan worker.
>
> —Steve
>
>
>
>
> On June 20, 2016 at 4:25:24 PM, Vin (vinothini....@gmail.com <javascript:>)
> wrote:
>
> with cloud scan setup with Fortify 16.10 version*
>
> On Monday, June 20, 2016 at 2:24:47 PM UTC-7, Vin wrote:
>>
>> Thank you so much. Will I be able to translate the code using Fortify 3.5
>> version and send the build to cloud scan using this plugin?
>>
>> On Monday, June 20, 2016 at 7:11:54 AM UTC-7, steve.s...@owasp.org
>> wrote:
>>>
>>> Vim,
>>>
>>> Build ID in this context is not referring to the traditional Jenkins
>>> BUILD_ID, it's referring to the buildId used by Fortify sourceanalyzer. So
>>> a Fortify build that runs through a clean and translation phase with a
>>> buildid of 'myproduct' for example, would also need to use 'myproduct' as
>>> the buildId in the CloudScan plugin.
>>>
>>> --Steve
>>>
>>>
>>>
>>> On Sunday, June 19, 2016 at 2:08:34 AM UTC-5, Vin wrote:
>>>>
>>>> Hi Team,
>>>> I'm facing difficulty integrating fortify-cloudscan-jenkins-plugin
>>>> with my jenkins.
>>>> I'm getting below error and Job is failing
>>>>
>>>> 2016-06-18 23:50:40,256 [ERROR]
>>>> com.fortify.cloud.cli.command.ExportMbsCommand - [error]: Unable to load
>>>> build session with ID "{BUILD_ID}". See log file for more details.
>>>>
>>>>
>>>> 2016-06-18 23:50:40,256 [ERROR]
>>>> com.fortify.cloud.cli.command.ExportMbsCommand - Error occurred while
>>>> exporting mobile build session.
>>>>
>>>> java.lang.Exception: Error occurred while exporting mobile build
>>>> session.
>>>>
>>>> at
>>>> com.fortify.cloud.cli.command.AbstractCommand.logAndThrowException(AbstractCommand.java:176)
>>>>
>>>> at
>>>> com.fortify.cloud.cli.command.ExportMbsCommand.runProcess(ExportMbsCommand.java:72)
>>>>
>>>> at
>>>> com.fortify.cloud.cli.command.ExportMbsCommand.execute(ExportMbsCommand.java:55)
>>>>
>>>> at
>>>> com.fortify.cloud.cli.AbstractMain.execute(AbstractMain.java:174)
>>>> at com.fortify.cloud.cli.Main.main(Main.java:40)
>>>>
>>>>
>>>> What is the value to be used for Build ID. I have used {BUILD_ID} as
>>>> the value. Please help
>>>>
>>> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Jenkins Developers" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/jenkinsci-dev/omV6sTMNT_U/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> jenkinsci-de...@googlegroups.com <javascript:>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/ca9942cf-5d62-4dc3-92a2-a8b77995e3d2%40googlegroups.com
>
> <https://groups.google.com/d/msgid/jenkinsci-dev/ca9942cf-5d62-4dc3-92a2-a8b77995e3d2%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>
>
--
You received this message because you are subscribed to the Google Groups
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/jenkinsci-dev/af9e0200-ae4e-44fa-b0bd-06e5791e3c1a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
