From c83210b70804b22be5061bc18d914ec59c3e84b3 Mon Sep 17 00:00:00 2001 From: Christopher Hubing Date: Thu, 4 Oct 2018 14:34:07 -0400 Subject: [PATCH] testing clair scanner in jenkins --- Jenkinsfile | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Jenkinsfile b/Jenkinsfile index c274a79a..95d84907 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -50,8 +50,13 @@ pipeline { script { docker.withRegistry('https://registry.hub.docker.com/', "dockerhub-$maintainer") { def baseImg = docker.build("$maintainer/$imagename", "--no-cache .") + // scan the image with clair + docker run -p 5432:5432 -d --name db arminc/clair-db:2017-10-04 + docker run -p 6060:6060 --link db:postgres -d --name clair arminc/clair-local-scan:v2.0.5 + curl -L -o clair-scanner https://github.com/arminc/clair-scanner/releases/download/v8/clair-scanner_linux_amd64 + chmod 755 clair-scanner + ./clair-scanner --ip 172.17.0.1 -r test.out $maintainer/$imagename // test the environment - aquaMicroscanner imageName: "$maintainer/$imagename" sh 'cd test-compose && ./compose.sh' // bring down after testing sh 'cd test-compose && docker-compose down'