Jenkinsfile-security-scan-vuln-deps

#!/usr/bin/env groovy

def actions

pipeline {
    agent {
        label 'docker'
    }
    triggers { cron('H 5 * * 1-5') }

    stages {
        stage('Checkout') {
            steps {
                checkout scm
            }
        }

        stage('Scan') {
            steps {
                dir ('sources') {
                    script {
                        actions = load 'tests/actions.groovy'
                        actions.runInsideNixShell('make scan-vuln-deps', 'dev')
                    }
                }
            }
        }
    }

    post {
        failure {
            withCredentials([string(credentialsId: 'email-notification-rd-team', variable: 'email')]) {
                mail to: email,
                subject: "${currentBuild.fullDisplayName} is broken",
                body: "See ${env.BUILD_URL}"
            }
        }
        unstable {
            withCredentials([string(credentialsId: 'email-notification-rd-team', variable: 'email')]) {
                mail to: email,
                subject: "${currentBuild.fullDisplayName} is unstable",
                body: "See ${env.BUILD_URL}"
            }
        }
    }
}