A BP step to leverage OWASP Dependency-Check to identify publicly disclosed vulnerabilities contained within a project’s dependencies

A BP step to do sonar scanning

A repo to create IAM policies in AWS

BP bash step for terraform execution

A BP step to perform linting of Dockerfile

BuildPiper step to find dependencies, detect the licenses of the packages in them, compare those licenses against a user-defined list of permitted licenses, and give you an actionable exception report

I'll validate if the whitelisted base image is being used