Nov 28, 2023 · The plugin adds the ability to perform security analysis with Fortify Static Code Analyzer, upload results to Fortify Software Security Center, ...

Dec 7, 2023 · This plugin shows history of test execution results in a tabular or graphical format.

Feb 25, 2024 · Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities.

Static analysis tools are effective in reporting risky code or code with potential security risks. Performance test results help identify delays or areas of ...

The Jenkins security team created a custom code scanner based on GitHub's CodeQL. It is capable of finding vulnerabilities common in Jenkins plugins. This page ...

Feb 29, 2024 · Veracode addresses common Application Security challenges with a unique combination of automated application analysis in the pipeline, plus ...

When there are test failures, it is often useful to grab built artifacts from Jenkins for local analysis and investigation. This is made practical by ...

Use withSonarQubeEnv step to run your analysis prior to use this step. Example using declarative pipeline: pipeline { agent none stages { stage("build & ...

Mar 22, 2024 · Anchore is a container inspection and analytics platform that enables operators to analyze, inspect, perform security scans, and evaluate custom ...

Pipeline Steps Reference. The following plugins offer Pipeline-compatible steps. Each plugin link offers more information about the parameters for each step ...