build-info icon indicating copy to clipboard operation
build-info copied to clipboard

Support for Artifactory XRay V2

Open cpuzicha opened this issue 1 year ago • 0 comments

Is your feature request related to a problem? Please describe. It is currently impossible to query the results of the XRay scan without actively triggering one. Our usecase is a CI pipeline that does:

  • build JARs
  • upload buildInfo, trigger XRay scan
  • do test
  • do static code analysis
  • retrieve XRay scan results
  • (publish to Artifactory)

Describe the solution you'd like to see Please implement the support for the XRay V2 API, in particular the GET XRay scan result for a given build

Describe alternatives you've considered We are currently using the JFrog CLI, but this means a change in system (gradle vs bash)

Additional context To support asynchron operation (ie 'artifactoryPublish' as first call, then some query for the results later), add a reader for the BuildInfo that is written by artifactoryPublish (or to be precise: by ArtifactoryDeployTask).

cpuzicha avatar Jan 26 '24 13:01 cpuzicha