From b5ac2370af43ec997288f46b07c95716e4ca8698 Mon Sep 17 00:00:00 2001
From: Todor Mitev <tmitev89@gmail.com>
Date: Wed, 8 Jul 2026 11:03:30 +0300
Subject: [PATCH] fix: New jenkins node name and gh app

---
 Jenkinsfile | 109 +++++++---------------------------------------------
 1 file changed, 14 insertions(+), 95 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 7f43d10..6b5ec46 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -1,97 +1,16 @@
 
-pipeline {
-    agent {
-        node {
-            label 'azure-linux-ubuntu-18'
-        }
-    }
-    options {
-        ansiColor('xterm')
-    }
-    stages {
-        stage('Checkout') {
-            steps {
-                checkout scm
-            }
-        }
-        stage('TruffleHog Scan') {
-            steps {
-                script {
-                    echo "Running TruffleHog scan..."
-                    sh '''
-                        docker run --rm -v ${WORKSPACE}:/usr/src \
-                            artifacts.progress.com/ci-local-docker/trufflesecurity/trufflehog:3.88.29-amd64 \
-                            git file:/usr/src \
-                            --results=verified,unknown \
-                            --force-skip-binaries \
-                            --force-skip-archives \
-                            --json \
-                            --no-update \
-                            > trufflehog_report.json
-                    '''
-                    echo "📄 TruffleHog scan completed. Output saved to trufflehog_report.json"
-                    def secretsFound = sh(
-                        script: 'grep -q \'"SourceMetadata"\' trufflehog_report.json',
-                        returnStatus: true
-                    )
-                    if (secretsFound == 0) {
-                        echo "❌ TruffleHog found potential secrets!"
-                        sh 'cat trufflehog_report.json'
-                        error("❌ TruffleHog scan failed, potential secrets detected in the repository.")
-                    } else {
-                        echo "✅ TruffleHog scan passed - No secrets detected."
-                    }
-                }
-            }
-        }
-        stage('polaris') {
-            steps {
-                withCredentials([string(credentialsId: 'blackduck-api-token', variable: 'BRIDGE_POLARIS_ACCESSTOKEN')]) {
-                    script {
-                        try {
-                            def status = sh(
-                                returnStatus: true,
-                                script: """
-                                    bridge-cli --stage polaris \
-                                    polaris.serverurl="https://polaris.blackduck.com" \
-                                    polaris.application.name="Podio-Podio" \
-                                    polaris.project.name="simpleconfig" \
-                                    polaris.branch.name="${env.BRANCH_NAME}" \
-                                    polaris.assessment.types="SAST" \
-                                    polaris.assessment.mode="SOURCE_UPLOAD"
-                                """
-                            )
-                            if (status == 8) {
-                                unstable('Policy violation')
-                            } else if (status != 0) {
-                                error('Bridge CLI failure')
-                            }
-                        } catch (Exception e) {
-                            echo "${e.getMessage()}"
-                        }
-                    }
-                }
-            }
-        }
-        stage('blackducksca') {
-            steps {
-                script {
-                    try {
-                        withCredentials([string(credentialsId: 'blackduck-sca-token', variable: 'BRIDGE_BLACKDUCKSCA_TOKEN')]) {
-                            withEnv([
-                                'BRIDGE_BLACKDUCKSCA_URL=https://progresssoftware.app.blackduck.com',
-                                'BRIDGE_BLACKDUCKSCA_SCAN_FAILURE_SEVERITIES=CRITICAL',
-                                'BRIDGE_BLACKDUCKSCA_SCAN_FULL=true',
-                                "BRIDGE_DETECT_ARGS=--detect.project.name=DX-Podio-simpleconfig --detect.project.version.name=${env.BRANCH_NAME} --detect.project.version.update=true --detect.project.group.name=Podio-Podio"
-                            ]) {
-                                sh(returnStatus: true, script: 'bridge-cli --stage blackducksca')
-                            }
-                        }
-                    } catch (Exception e) {
-                        echo "${e.getMessage()}"
-                    }
-                }
-            }
-        }
+#!/usr/bin/env groovy
+applicationName = "simpleconfig";
+securityScanOnly = true;
+
+def template
+node ('aws-linuxdocker-test') {
+    checkout scm
+    dir("jenkins-template") {
+        checkout([$class: 'GitSCM',branches: [[name:'main']],extensions:[],userRemoteConfigs: [[credentialsId: 'gh-podio-app', url: 'https://github.com/podio/jenkins-template-repo.git']]])
     }
-}    
+    def rootDir = pwd()
+    template = load "${rootDir}/jenkins-template/Jenkinsfile"
+}
+
+template()