Sonar qube and Nmap

jenkins/Jenkinsfile

@@ -1,18 +1,18 @@
 pipeline {
     agent any
-    parameters {
-        string name: 'dockerComposePath', defaultValue: "", description: "Path of the docker-compose.yml"
-        string name: 'dockerfilePath', defaultValue: "", description: "Path of the Dockerfile"
-        base64File description: 'File containing the endpoints to be tested by SQLmap', name: 'endpoints'
+    parameters{
+        string(name: 'dockerComposePath', defaultValue: '', description: 'Path of the docker-compose.yml')
+        string(name: 'dockerfilePath', defaultValue: '', description: 'Path of the Dockerfile')
+        string(name: 'endpointsPath', defaultValue: '', description: 'Path of the endpoints to test SQLmap')       
     }
     environment {
         REPO_URL = ''
         CURR_BRANCH = ''
         workspace = ''
         relativeWorkspacePath = ''
         SNYK_TOKEN = credentials('snyk-token')
-        IMAGES = ''
-    }
+        images_string = ''
+    } 
     stages {
         stage ('Checkout SCM') 
         {
@@ -21,15 +21,14 @@ pipeline {
                     script {
                         checkout scm
                         workspace = pwd ()
-                    }
+                    } 
                 }
-            }
+            } 
         }
         stage('Setting Environment Variables') {
             steps {
                 catchError(buildResult: 'SUCCESS', stageResult: 'FAILURE') {  
                     script {
-
                         echo "Getting git repo info"
                         // Get the current repository URL
                         REPO_URL = sh(script: 'git config --get remote.origin.url', returnStdout: true).trim()
@@ -84,12 +83,12 @@ pipeline {
                             // If dockerComposePath is provided, run docker-compose to build images
                             echo "Docker Compose file detected. Building images using docker-compose..."
                             sh """
-                                docker compose -f ${workspace}/${dockerComposePath} build --parallel
+                                docker compose -f ${workspace}${params.dockerComposePath} build --parallel
                             """
 
                             // Get repository and tag of the images created by docker-compose
                             images = sh(script: """
-                                docker compose -f ${workspace}/${dockerComposePath} images --format '{{.Repository}}:{{.Tag}}'
+                                docker compose -f ${workspace}${params.dockerComposePath} images --format '{{.Repository}}:{{.Tag}}'
                             """, returnStdout: true).trim().split("\n")                       
 
                         } else if (dockerfilePath?.trim()) {
@@ -98,7 +97,7 @@ pipeline {
 
                             def imageName = "my_image:latest" // You can customize the image name as needed
                             sh """
-                                docker build -t ${imageName} -f ${dockerfilePath} .
+                                docker build -t ${imageName} -f ${params.dockerfilePath} .
                             """
 
                             echo "Image built from Dockerfile: ${imageName}"
@@ -108,7 +107,7 @@ pipeline {
                         }
 
                         // Save images to an environment variable for later stages
-                        IMAGES = images.join(",")
+                        images_string = images.join(",")
                     }
                 }
             }
@@ -118,8 +117,8 @@ pipeline {
                 catchError(buildResult: 'SUCCESS', stageResult: 'FAILURE') {
                     script {
                         def images = []
-                        if (IMAGES && IMAGES.trim()) {
-                            images = IMAGES.split(",")
+                        if (${images_string} && ${images_string}.trim()) {
+                            images = ${images_string}.split(",")
                         }
                         else {
                             error "No images to scan with Snyk"
@@ -143,13 +142,10 @@ pipeline {
         }             
         stage('SQL map endpoints scan') {
             steps {
-                catchError(buildResult: 'SUCCESS', stageResult: 'FAILURE') {
-                    withFileParameter('endpoints') {
-                        sh """
-                        docker run --rm -v ${PWD}:/usr/src/myapp -w /usr/src/myapp thanosefsta/sqlmap:latest -m ${workspace}/jenkins/sqlmap/endpoints.txt --batch > sqlmap
-                        """
-
-                    }
+                catchError(buildResult: 'SUCCESS', stageResult: 'FAILURE') {    
+                    sh """
+                    docker run --rm -v ${PWD}:/usr/src/myapp -w /usr/src/myapp thanosefsta/sqlmap:latest -m ${workspace}${params.endpointsPath} --batch > sqlmap
+                    """  
                 }
 
             }
@@ -160,7 +156,6 @@ pipeline {
                     script {
                         sh """
                         docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -v ${PWD}:/usr/src/myapp -w /usr/src/myapp nikolaskir2000/nmap_image_3:latest -p- 192.168.2.11
-
                         """
                     }
                 }

jenkins/sqlmap/endpoints.txt

@@ -1 +1 @@
-http://testphp.vulnweb.com/artists.php?artist=1%27
+http://testphp.vulnweb.com/artists.php?artist=1