Jenkinsfile_nightly

#!groovy

properties([
  // H allow predefined but random minute see https://en.wikipedia.org/wiki/Cron#Non-standard_characters
  pipelineTriggers([cron('H 8 * * 1-5')])
])

@Library("Infrastructure")

def type = "java"
def product = "bulk-scan"
def component = "payment-processor"

env.TESTCONTAINERS_HUB_IMAGE_NAME_PREFIX = 'hmctspublic.azurecr.io/imported/'

def secrets = [
  'bulk-scan-${env}': [
    secret('fortify-on-demand-username', 'FORTIFY_USER_NAME'),
    secret('fortify-on-demand-password', 'FORTIFY_PASSWORD')
  ]
]

static LinkedHashMap<String, Object> secret(String secretName, String envVar) {
  [ $class: 'AzureKeyVaultSecret',
    secretType: 'Secret',
    name: secretName,
    version: '',
    envVariable: envVar
  ]
}
withNightlyPipeline(type, product, component) {
  loadVaultSecrets(secrets)
  enableFortifyScan('bulk-scan-aat')
  enableSlackNotifications('#bsp-build-notices')
  afterSuccess('fortify-scan') {
    steps.archiveArtifacts allowEmptyArchive: true, artifacts: '**/Fortify Scan/**/*'
  }
}