Way to access code insight report generated after bitbucket dependency scan

[Sachin Kaushik]

Hi,

Is there a way to access code insight report generated after bitbucket dependency scan? I want to upload this insights report to artifact so that i can access in the next steps in the pipeline.

[Oleksandr Kyrdan]

Hi @Sachin Kaushik 

Thank you for your feedback!

The new pipe's version with support reports generation even pipe is failed and level of cvss:

  - pipe: atlassian/bitbucket-dependency-scanner:0.7.0
    variables:
      NVD_API_KEY: $NVD_API_KEY
      EXTRA_ARGS:
        - "--failOnCVSS=7"

Best regards,
Oleksandr Kyrdan

[Sachin Kaushik]

Hi Patrik,

Sorry, I should have been more descriptive. I can access the scan report per se, like you mention. My question was actually directed towards the reports you see when you click a  pipeline run to view its details/logs (not sure what do we call these reports, I guess). Please refer to the image for more clarity.

Is there a way to have these exported/downloaded in some form so I can use them in later steps (like attaching these reports to a JIRA ticket)?

[Patrik S]

Hello @Sachin Kaushik ,

Thanks for reaching out to the Community!

By default, the pipe atlassian/bitbucket-dependency-scanner will generate the report in the directory where the pipeline was at when the pipe was invoked.

The report will be named  dependency-check-report.json and you can export it as an artifact configuring your YAML similar to the below example 

script:
  - pipe: atlassian/bitbucket-dependency-scanner:0.3.0
artifacts:
  - dependency-check-report.json

Could you try that suggestion and let us know how it goes ?

Than you, @Sachin Kaushik !

Patrik S

[Sachin Kaushik]

Hi Patrik,

Sorry, I should have been more descriptive. I can access the scan report per se, like you mention. My question was actually directed towards the reports you see when you click a  pipeline run to view its details/logs (not sure what do we call these reports, I guess). Please refer to the image for more clarity.

Is there a way to have these exported/downloaded in some form so I can use them in later steps (like attaching these reports to a JIRA ticket)?

[Igor Stoyanov]

@Sachin Kaushik Hi. Check the file here: 


How to use artifacts

Regards, Igor