Logo Sonatype CLM Sonatype CLM Enforcement Points - Continuous Integration (CI)
Documentation Index
Sonatype CLM Downloads
Release Notes
Document Descriptions and PDFs
Upgrade Instructions

Sonatype CLM Server
Installation and Configuration
Security Administration
Policy Management
Dashboard
Application Composition Report
REST APIs

Enforcement Points
Continuous Integration (CI)
IDE
Nexus
SonarQube

The CLM Book (All Guides)
Optimized Component Lifecycle Management with Sonatype CLM

Sonatype CLM Enforcement Points - Continuous Integration (CI)

Table of Contents





Authors

Sonatype, Inc. Manfred Moser Jeff Wayman Bruce Mayhew Justin Young Kelly Robinson
1. Introduction
2. Sonatype CLM for CI
2.1. Introduction
2.2. Installation
2.3. Global Configuration
2.4. Job Configuration
2.5. Inspecting Results
3. Sonatype CLM Command Line Scanner
3.1. Introduction
3.2. Downloading the Scanner
3.3. Locating Your Application Identifier
3.4. Setting Up the Scanner in Your CI
3.5. Summary
4. Sonatype CLM Maven Plugin
4.1. CLM Maven Plugin Introduction
4.2. Creating a Component Index for Sonatype CLM for CI
4.3. Creating a Component Info Archive for Nexus Pro CLM Edition
4.4. Evaluating Project Components with Sonatype CLM Server
4.5. Simplifying Command Line Invocations
4.6. Skipping CLM Maven Plugin Executions

List of Figures

2.1. Jenkins Global Configuration Menu
2.2. Global Configuration of Sonatype CLM for CI in Jenkins
2.3. Sonatype CLM Build Scan Configuration for a Build Step
2.4. Post-build Action Configuration as Example for a Sonatype CLM for CI Configuration
2.5. Job Overview Page with Links to the Application Composition Report and Application Management
2.6. Left Menu with Link to the Application Composition Report
3.1. Application Overview and Application Identifier