Hi all.
Centos 7
Jenkins 2.30
Brakeman plugin: 0.8
I think I have got the Brakeman plugin installed OK, and it seems to be generating the correct output file, and the build step is passing in Jenkins OK, as noted in the attached screenshot of the Stage Log - jenkins-brakeman-run.png.
I have also added the following step to the Jenkinsfile to publish the output from the brakeman plugin:
stage('Brakeman security scanner') {
node {
...
// publish the scanner results
publishBrakeman '/var/lib/jenkins/brakeman-output.tabs'
}
}
From the documentation for the plugin at
https://wiki.jenkins-ci.org/display/JENKINS/Brakeman+Plugin:
Publishing Results
Check the "Publish Brakeman warnings" option under "Post-build
Actions". Make sure the output file name matches the one used in the
shell command.
I cannot find a Post-build action or the Publish Brakeman warnings option to check.
From the document for the Brakeman website:
http://brakemanscanner.org/docs/jenkins/setup/Enable the plugin
On the job configuration page, check the box next to “Publish
Brakeman warnings”. On newer builds of Jenkins, you’ll find this under
the “Add post-build action” dropdown at the bottom of the page.
The plugin will look for an output file from Brakeman in the work
directory. The name of the output file can be specified here, but the
default should be fine.
This still does not shed much light on the issue.
Is there another module that I might need, or does the Brakeman plugin also install all the modules it needs when it is installed?
Can anyone please tell me how to get Brakman to display the scan results in Jenkins dashboard, for the developers to view these results?
TIA
Fred