pipeline

properties([
    parameters([
	string(defaultValue: '', description: 'DefectKey', name: 'DefectKey'),
    string(defaultValue: '', description: 'SonarKey', name: 'SonarKey'),
    ]),
    pipelineTriggers([])
])


pipeline {
    agent any
    stages {
        stage('Crearproducto') {
            steps {
                withCredentials([string(credentialsId: 'defect', variable: 'defect')]) {
                sh '''
                    curl -s -X 'POST' -H "Authorization: Token ${defect}" \
                      'http://localhost:8082/api/v2/products/' \
                      -H 'accept: application/json' \
                      -H 'Content-Type: application/json' \
                      -d '{
                      "name": "demos",
                      "external_audience": true,
                      "prod_type": "1",
                      "description": "prueba producto"
                    }'                    
				  '''
            }
            }
        }
        stage('Crearengagement') {
            steps {
                withCredentials([string(credentialsId: 'defect', variable: 'defect')]) {
                sh '''
    				PROYECTO=`curl -X 'GET' 'http://localhost:8082/api/v2/products/' -H 'accept: application/json' -H "Authorization: Token ${defect}" -s | jq '.results[] | select(.name=="demos") | .id'`
        				curl -X 'POST' -H "Authorization: Token ${defect}" \
    				  'http://localhost:8082/api/v2/engagements/' \
    				  -H 'accept: application/json' \
    				  -H 'Content-Type: application/json' \
    				  -d '{
    				  "name": "demosEng",
    				  "target_start": "2021-10-15",
    				  "target_end": "2021-10-31",
    				  "test_strategy": "",
    				  "deduplication_on_engagement": "on",
    				  "lead": "1",
    				  "product": "'"$PROYECTO"'"
    				}'
				'''
            }
            }
        }
        
        stage('ScanSonarqube') {
            steps {
                sh '''
					cd /home/demos/demos
					git clone https://github.com/digininja/DVWA
					cd DVWA
					curl --include --request POST --header "Content-Type: application/x-www-form-urlencoded" -u "${SonarKey}:" -d 'project=demos&organization=demos&name=demos' 'http://localhost:9000/api/projects/create'
					/home/demos/Descargas/sonar-scanner-cli-4.6.2.2472-linux/sonar-scanner-4.6.2.2472-linux/bin/sonar-scanner \
					  -Dsonar.projectKey=demos \
					  -Dsonar.sources=. \
					  -Dsonar.host.url=http://localhost:9000 \
					  -Dsonar.login=${SonarKey}
					sleep 15					
					PROYECTO=`curl -X 'GET' 'http://localhost:8082/api/v2/products/' -H 'accept: application/json' -H "Authorization: Token ${DefectKey}" -s | jq '.results[] | select(.name=="demos") | .id'`
					ENGA=`curl -X 'GET' http://localhost:8082/api/v2/engagements/?product=${PROYECTO} -H 'accept: application/json' -H "Authorization: Token ${DefectKey}" -s | jq '.results[] | select(.name=="demosEng") | .id'`
					sleep 40
					curl --location --request POST 'http://localhost:8082/api/v2/import-scan/' \
					--header "Authorization: Token ${DefectKey}" \
					--form 'engagement="'"$ENGA"'"' \
					--form 'verified=true' \
					--form 'active=true' \
					--form 'scan_type=SonarQube API Import'

                '''
            }
        }
        
         stage('ScanOwaspzap') {
            steps {
            sh "/home/demos/demos/scan_zap.sh"
            }
        }
	    }
}