How to Use MergeBase in: Jenkins

We're going to be adding a shell execution step to run the MergeBase CLT tool. 

wget --header="X-Authorization: [token-here]" https://app.mergebase.com/{customerKey}/api/update/clt/mergebase.jar

# your URL may be in the form:  https://trial.mergebase.com/[your-comany-here]/api/update/clt/mergebase.jar

java -jar mergebase.jar --name=TestPipeline ./pom.xml
# optionally: add --ignoreExitCode if you want the build to succeed even when the project has vulnerabilities

Copy this token to your Jenkins script

Add the customer token to the script from above. You can modify the name of the project and target the file in your application that you'd like to scan. If this is a multi-module project, specify the module you'd like to scan in the command as shown below:

java -jar mergebase.jar --name=YourNameHere ./path/to/scan

As you can see, your project has been scanned and you can view the full report for your application.