added scanning image

azure-pipelines.yml

@@ -9,51 +9,49 @@ stages:
       - job: Build
         displayName: 'Building and Testing'
         steps:  
+        - task: Maven@4
+          displayName: 'build and publish the maven code'
+          inputs:
+            mavenPomFile: pom.xml
+            goals: 'clean package'
+            testResultsFiles: '**/surefire-reports/TEST-*.xml'
+            publishJUnitResults: true
+      
+        - task: CopyFiles@2
+          inputs:
+            contents: '**/*.jar'
+            targetFolder: '$(Build.ArtifactStagingDirectory)'
 
-steps:
+        - task: PublishBuildArtifacts@1
-  - task: Maven@4
+          inputs:
-    displayName: 'build and publish the maven code'
+            pathToPublish: '$(Build.ArtifactStagingDirectory)'
-    inputs:
+            artifactName: drop
-      mavenPomFile: pom.xml
-      goals: 'clean package'
-      testResultsFiles: '**/surefire-reports/TEST-*.xml'
-      publishJUnitResults: true
- 
-  - task: CopyFiles@2
-    inputs:
-      contents: '**/*.jar'
-      targetFolder: '$(Build.ArtifactStagingDirectory)'
 
-  - task: PublishBuildArtifacts@1
+        - task: Docker@2
-    inputs:
+          displayName: 'Build docker image'  
-      pathToPublish: '$(Build.ArtifactStagingDirectory)'
+          inputs:
-      artifactName: drop
+            command: 'build'
+            Dockerfile: './Dockerfile'
+            repository: venkeyboda/spring-petclinic
+            tags: '$(Build.BuildId)'
 
-  - task: Docker@2
+        - task: CmdLine@2
-    displayName: 'Build docker image'  
+          displayName: 'scannig image '
-    inputs:
+          inputs:
-      command: 'build'
+            script: |
-      Dockerfile: './Dockerfile'
+              trivy image  $(venkeyboda/spring-petclinic):$(Build.BuildId) -o trivy-report.xml
-      repository: venkeyboda/spring-petclinic
-      tags: '$(Build.BuildId)'
 
-  - task: CmdLine@2
+        - task: PublishPipelineArtifact@1
-    displayName: 'scannig image '
+          displayName: 'Publish Trivy Report'
-    inputs:
+          inputs:
-      script: |
+            targetPath: 'trivy-report.xml'
-        trivy image  $(venkeyboda/spring-petclinic):$(Build.BuildId) -o trivy-report.xml
+            artifact: 'TrivyReport'
 
-  - task: PublishPipelineArtifact@1
+        - task: Docker@2
-    displayName: 'Publish Trivy Report'
+          displayName: 'pushing the docker image'  
-    inputs:
+          inputs:
-      targetPath: 'trivy-report.xml'
+            command: 'push'
-      artifact: 'TrivyReport'
+            containerRegistry: 'docker hub'
-
+            repository: venkeyboda/spring-petclinic
-  - task: Docker@2
+            tags: |
-    displayName: 'pushing the docker image'  
+              '$(Build.BuildId)'          
-    inputs:
-      command: 'push'
-      containerRegistry: 'docker hub'
-      repository: venkeyboda/spring-petclinic
-      tags: |
-        '$(Build.BuildId)'