Add WhiteSource scan (#1005)

Author: nils-werner-sonarsource

.cirrus.yml

@@ -72,6 +72,29 @@ build_win_task:
     - git submodule update --init
     - mvn.cmd -s /c/buildTools-docker/settings-public.xml test -DskipTypeshed=true
   cleanup_before_cache_script: cleanup_maven_repository
+
+ws_scan_task:
+  depends_on:
+    - build
+  gke_container:
+    <<: *CONTAINER_DEFINITION
+    cpu: 2
+    memory: 2G
+  # run only on master and long-term branches
+  only_if: $CIRRUS_USER_COLLABORATOR == 'true' && ($CIRRUS_BRANCH == "master" || $CIRRUS_BRANCH =~ "branch-.*")
+  env:
+    WS_APIKEY: ENCRYPTED[!3929c6148b9dfc751a2d17c590b15d755f82cd9c108f2de5f24a5b32f2a0c26144e921fab7e2c959fc2824d6d6d1550d!]
+  maven_cache:
+    folder: ${CIRRUS_WORKING_DIR}/.m2/repository
+  whitesource_script:
+    - source cirrus-env QA
+    - source set_maven_build_version $BUILD_NUMBER
+    - mvn clean install -DskipTests
+    - source ws_scan.sh
+  allow_failures: "true"
+  always:
+    ws_artifacts:
+      path: "whitesource/**/*"
 
 plugin_qa_task:
   depends_on:
@@ -123,6 +146,7 @@ promote_task:
   depends_on:
     - ruling
     - plugin_qa
+    - ws_scan
   only_if: $CIRRUS_PR != "" || $CIRRUS_BRANCH == "master" || $CIRRUS_BRANCH =~ "branch-.*"
   gke_container:
     <<: *CONTAINER_DEFINITION

wss-unified-agent.config

@@ -0,0 +1,17 @@
+# WhiteSource documentation https://whitesource.atlassian.net/wiki/spaces/WD/pages/1544880156/Unified+Agent+Configuration+Parameters
+
+excludes=**/*sources.jar **/*javadoc.jar its/sources/** its/plugin/it-python-plugin-test/projects/**
+fileSystemScan=False
+resolveAllDependencies=False
+
+maven.aggregateModules=True
+maven.downloadMissingDependencies=False
+maven.m2RepositoryPath=.m2/repository
+maven.resolveDependencies=True
+maven.runPreStep=False
+
+wss.url=https://saas-eu.whitesourcesoftware.com/agent
+
+forceUpdate=true
+checkPolicies=true
+forceUpdate.failBuildOnPolicyViolation=true