14-stage Jenkins pipeline with real scanners (Semgrep, Gitleaks, Trivy, SonarQube, Checkov, ZAP, Cosign), Helm chart, DefectDojo integration. Includes CWE-89, CWE-79, CWE-798, CWE-22, CWE-330 for SAST/secrets demo.
6 lines
149 B
Properties
6 lines
149 B
Properties
sonar.projectKey=demo-app
|
|
sonar.projectName=Demo Application
|
|
sonar.sources=src
|
|
sonar.tests=test
|
|
sonar.javascript.lcov.reportPaths=coverage/lcov.info
|