1酬屉、jenkins pipeline從git下載代碼執(zhí)行sonarqube掃描

pipeline {
    agent any
    options{
        //超時設(shè)置 單位：分鐘 
        timeout(time: 5)
        //重試次數(shù)
        retry(0)
        //保持構(gòu)建的最大個數(shù)
        buildDiscarder(logRotator(numToKeepStr:'3'))
        //不允許并發(fā)構(gòu)建
        disableConcurrentBuilds()
        gitLabConnection('AMS gitlab')
    }
    tools {
        maven 'apache-maven-3.6.3'
        jdk 'jdk1.8.0_261'
    }
    stages {
        //下載代碼
        stage('pull code') {
            steps {
                deleteDir()
                git branch: 'develop', credentialsId: 'fa87a0cc-9dea-4aea-927a-b6c4137c5bac', url: 'ssh://git@X:X/X.git'
            }
        }
        //代碼掃描
        stage('scan code') {
            
            steps {
                script {
                    scannerHome = tool 'sonar-scanner-4.6.0'
                }                
                withSonarQubeEnv('SonarQube ') {
                    sh "${scannerHome}/bin/sonar-scanner -Dsonar.projectKey=X -Dsonar.java.binaries=$WORKSPACE -Dsonar.java.source=1.8 -Dsonar.analysis.branch=develop  -Dsonar.coverage.exclusions=**/**/**"
                } 
                sleep time: 5, unit: 'SECONDS'
                script{
                    qg = waitForQualityGate()
                    if (qg.status != 'OK') {
                        updateGitlabCommitStatus name: 'scan', state: 'failed'
                        error "未通過Sonarqube的代碼質(zhì)量閾檢查，請及時修改靶衍！failure: ${qg.status}"
                    }else{
                        updateGitlabCommitStatus name: 'scan', state: 'success'
                    }                    
                }

            }
        } 
        //打包
        stage('package code') {
            steps {
                sh 'mvn clean package'  
                updateGitlabCommitStatus name: 'build', state: 'success'
            }
        }   
        //發(fā)布
        stage('publish code') {
            steps {
                sh 'scp $WORKSPACE/X/X.jar X:/X'  
                sh 'ssh X "ps -ef|grep 8096|grep -v grep |awk \'{print \$2}\'|xargs -r kill -9;nohup /data/software/jdk1.8.0_261/bin/java -jar /X/X.jar --server.port=8096 > /dev/null 2>&1 &"'
                updateGitlabCommitStatus name: 'publish', state: 'success'
            }
        }          
    }
  post {
    success {
      updateGitlabCommitStatus name: 'complete', state: 'success'
    }
    failure {
      updateGitlabCommitStatus name: 'complete', state: 'failed'
      emailext to: 'X@X',subject: '${PROJECT_NAME} - Build #${BUILD_NUMBER} - ${BUILD_STATUS}!',body: 'Check console output at ${BUILD_URL} to view the results'
    }
  }
}

2司浪、使用憑證中的用戶名密碼

1、pipeline形式

pipeline {
    agent {
        node {
            label 'common-frontend'
        }
    }

    stages {
        stage('pull-code') {
            steps {
                // wsl_git_token為用戶名密碼形式的憑據(jù)名
                git credentialsId: 'wsl_git_token', url: 'http://XX.git' ,branch: 'release' 
            }
        }
        stage('package code') {
            steps {
                
                withCredentials([usernamePassword(credentialsId: "nexus_ams_credential", passwordVariable: 'password', usernameVariable: 'username')]) {
                    sh "nexus_login.sh ${username} ${password} ams@email.com npm_ams_group"
                }
                sh 'npm install  --registry=http://X:8081/repository/npm_ams_group'
                sh 'npm run build:prod' 
            }
        } 
        stage('publish code') {
            steps {
                sh 'tar -cvf dist.tar dist'
                sh 'scp -o StrictHostKeyChecking=no dist.tar X:/data/app/eamap/app'  
                sh 'ssh X "cd /data/app/eamap/app;rm -rf dist;tar -xvf dist.tar;"'
            }
        }         
    }
}

2且叁、圖形化形式

圖片.png