Below is the snyk plugin setup for maven. I have setup the plugin in pom.xml. I configured the maven set up in a pipeline. The below configuration has a secret API_TOKEN. Setting API_TOKEN as a variable in any file except the default pipeline file does not work. So I am exploring some way to setup and run the plugin in pipeline file i.e. to access and run plugin in mvn commandline for example
mvn my-plugin:my-goal -Dplugin.property=ABC.
But I am not sure, how to call snyk plugin and run during build/install/deploy command.
<plugin>
<groupId>io.snyk</groupId>
<artifactId>snyk-maven-plugin</artifactId>
<version>1.2.5</version>
<executions>
<execution>
<id>snyk-test</id>
<phase>test</phase>
<goals>
<goal>test</goal>
</goals>
</execution>
<execution>
<id>snyk-monitor</id>
<phase>install</phase>
<goals>
<goal>monitor</goal>
</goals>
</execution>
</executions>
<configuration>
<apiToken>${SNYK_TOKEN}</apiToken>
<failOnSeverity>high</failOnSeverity>
<org>MDA</org>
</configuration>
</plugin>
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…