An end to end CI-CD projects implementing DevSecOps principles

In this project, we will be see how to use Git, GitHub , Jenkins,SonarQube and DEPLOY on a AWS EC2.,

*Follow this project *

1. Git
2. Github
3. Jenkins
4. SonarQube
5. AWS EC2
6. Java open-jdk 11
7. Maven

Push all the web application page code file into github

1. Install sonarqube scanner plugins
2. go to manage jenkins > manage pulgins > search for plugins > install without restart

1. Create a Project Manually
2. Give name to your project , Project key then click on setup
3. Click on other ci and generate token
4. Copy that token and save somewhere because we need this token later.

1. go to manage jenkins > Manage Credentials > system > Add credentials > secret text file > paste token we create in sonarqube and save and apply.
2. go to manage Jenkins > Global tool configuration > Add Maven and SonarQube Scanner
3. go to manage Jenkins > Configure System > Add SonarQube Server

1. go to new item > enter item name > Pipeline > ok
2. go to pipeline and create your pipeline script and save and apply
3. Click on Build now to build your job
4. to see output of the build , click on build > console output

Jenkins Output :

You can find your jar file build by maven at /var/lib/jenkins/workspace/devopscicd/target/ this location

Sonarqube Output:

Jar file Deploy Output: