Merge pull request #491 from hmcts/RWA-4728-fortify

RWA-4728: fortify nightly

Author: larslnde

Jenkinsfile_nightly

@@ -12,4 +12,9 @@ def product = "wa"
 def component = "standalone-task-bpmn"
 
 withNightlyPipeline(type, product, component) {
+  enableFortifyScan()
+
+  afterSuccess('fortify-scan') {
+    steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/Fortify Scan/**/*'
+  }
 }

build.gradle

@@ -102,6 +102,12 @@ tasks.register('tests') {
   dependsOn test, integration, functional
 }
 
+tasks.register('fortifyScan', JavaExec)  {
+  mainClass = "uk.gov.hmcts.fortifyclient.FortifyClientMainApp"
+  classpath += sourceSets.test.runtimeClasspath
+  jvmArgs = ['--add-opens=java.base/java.lang.reflect=ALL-UNNAMED']
+}
+
 checkstyle {
   maxWarnings = 0
   toolVersion = '11.0.1'
@@ -298,6 +304,7 @@ dependencies {
 
   testImplementation group: 'com.h2database', name: 'h2', version: '2.3.232'
   integrationTestImplementation "org.junit.vintage:junit-vintage-engine:${versions.junit}"
+  testImplementation group: 'com.github.hmcts', name: 'fortify-client', version: '1.4.9', classifier: 'all'
 
   integrationTestImplementation sourceSets.main.runtimeClasspath
   integrationTestImplementation sourceSets.test.runtimeClasspath

config/fortify-client.properties

@@ -0,0 +1 @@
+fortify.client.releaseId=175277