CODEWITHSUNDEEP
jenkinsstatic-analysis
fourthnen
fourthnen

Reputation: 194

How can I track values between Jenkins Builds (Static Analysis)

I'm running a number of static analysis tools and I want to track the results from build to build. For example, if a commit to a branch increases the number of security vulnerabilities, I want to send an email to the committer. I know there are plugins like Sonar and Analysis Collector, but they don't cover all of the areas of analysis I want and they don't seem to have the ability to trigger actions based on build trends (correct me if I'm wrong).

Upvotes: 3

Views: 454

Answers (2)

twasbrillig
twasbrillig

Reputation: 18831

You can use the Groovy Postbuild Plugin:

https://wiki.jenkins-ci.org/display/JENKINS/Groovy+Postbuild+Plugin

It lets you extract data (such as number of vulnerabilities detected) from the current build's buildlog with num_vul = manager.getLogMatcher(regexp)

And compare that to previous builds, by extracting info from their buildlog, e.g.:

currentBuildNumber = manager.build.number
manager.setBuildNumber(currentBuildNumber - 1)
prev_num_vul = manager.getLogMatcher(regexp)

Then, if the number of vulnerabilities had gone up, I would call manager.buildFailure() which sets the build status to FAILURE, and then have the next PostBuild step be to the Email-ext plugin which allows you to send email to the committer in the event of a failure.

Upvotes: 1

barfuin
barfuin

Reputation: 17474

I would recommend the SonarQube tool, which does just what you describe. You mention that you already looked at it, but maybe you missed the Notifications feature or the Build Breaker Plugin. There are more SonarQube features centered around Jenkins integration. SonarQube is free to use.

If you are still missing something, it might be worthwhile asking specifically how that aspect could be covered by SonarQube. Just my two cents.

Upvotes: 0

Related Questions