-
Notifications
You must be signed in to change notification settings - Fork 12
Open
Labels
Description
in the SAP Community Q&A post SAP sponsored check of OpenSource ABAP Projects with Code Vulnerability Analyzer we've born the idea to get an automated security check for all projects listed in https://dotabap.org/. I've just checked how abapGit CI does currently get the projects in the Organization abapGit-tests. This is implemented in the class ZCL_ABAPGIT_CI_TEST_REPOS which implements the interface ZIF_ABAPGIT_CI_REPO_PROVIDER. And this class is then used in the report ZABAPGIT_CI to provide the list of repositories to zcl_abapgit_ci_controller.
Should I simply go ahead and do the following:
- implement a class ZCL_ABAPGIT_CI_DOTABAP_REPOS that reads the repositories from https://raw.githubusercontent.com/dotabap/dotabap-list/master/list.json and returns the repositories as needed.
- Adjust the report ZABAPGIT_CI to provide a select option where the implementation classes of ZIF_ABAPGIT_CI_REPO_PROVIDER can be provided. Fill that select option by default with ZCL_ABAPGIT_CI_TEST_REPOS so the current users of ZABAPGIT_CI don't see any difference.
- Use the input from the select option run zcl_abapgit_ci_controller multiple times if needed.
?
christianguenter2, soschlegel and mbtools