Jenkins: support pack signing [STUD-78152]

Author: AndreiDinca24

CODEOWNERS

@@ -1 +1 @@
-@aoltean16 @leonard-apostoaie @AndreiDinca24
+* @aoltean16 @leonard-apostoaie @AndreiDinca24

pom.xml

@@ -46,6 +46,7 @@
         <jquery3-api.version>3.7.1-1</jquery3-api.version>
         <echarts-api.version>5.4.0-7</echarts-api.version>
         <matrix-project.version>822.824.v14451b_c0fd42</matrix-project.version>
+        <ban-junit4-imports.skip>false</ban-junit4-imports.skip>
     </properties>
 
     <name>UiPath Plugin</name>

src/main/java/com/uipath/uipathpackage/UiPathPack.java

@@ -57,6 +57,9 @@ public class UiPathPack extends Builder implements SimpleBuildStep {
     private SelectEntry credentials;
     private final TraceLevel traceLevel;
     private String governanceFilePath;
+    private String certificatePath;
+    private String password;
+    private String timestampServerUrl;
 
     /**
      * Data bound constructor responsible for setting the values param values to state
@@ -87,6 +90,9 @@ public UiPathPack(SelectEntry version, String projectJsonPath, String outputPath
         this.credentials = null;
         this.runWorkflowAnalysis = false;
         this.governanceFilePath = null;
+        this.certificatePath = null;
+        this.password = null;
+        this.timestampServerUrl = null;
     }
 
     /**
@@ -183,6 +189,27 @@ public void perform(@Nonnull Run<?, ?> run, @Nonnull FilePath workspace, @Nonnul
             packOptions.setProjectUrl(projectUrl);
             packOptions.setReleaseNotes(releaseNotes);
 
+            if (certificatePath != null && !certificatePath.trim().isEmpty()) {
+                FilePath expandedSignPath = certificatePath.contains("${WORKSPACE}") ?
+                        new FilePath(launcher.getChannel(), envVars.expand(certificatePath)) :
+                        workspace.child(envVars.expand(certificatePath));
+                packOptions.setCertificatePath(expandedSignPath.getRemote());
+
+                if (password != null && !password.trim().isEmpty()) {
+                    org.jenkinsci.plugins.plaincredentials.StringCredentials passwordCredentials = com.cloudbees.plugins.credentials.CredentialsMatchers.firstOrNull(
+                            com.cloudbees.plugins.credentials.CredentialsProvider.lookupCredentials(org.jenkinsci.plugins.plaincredentials.StringCredentials.class, run.getParent(), hudson.security.ACL.SYSTEM, java.util.Collections.emptyList()),
+                            com.cloudbees.plugins.credentials.CredentialsMatchers.withId(password)
+                    );
+                    if (passwordCredentials != null) {
+                        packOptions.setCertificatePassword(passwordCredentials.getSecret().getPlainText());
+                    }
+                }
+
+                if (timestampServerUrl != null && !timestampServerUrl.trim().isEmpty()) {
+                    packOptions.setTimestampServerUrl(timestampServerUrl);
+                }
+            }
+
             if (version instanceof ManualVersionEntry) {
                 packOptions.setVersion(envVars.expand(((ManualVersionEntry) version).getVersion().trim()));
             } else if (version instanceof AutoVersionEntry) {
@@ -283,6 +310,21 @@ public void setReleaseNotes(String releaseNotes) {
         this.releaseNotes = releaseNotes;
     }
 
+    @DataBoundSetter
+    public void setCertificatePath(String certificatePath) {
+        this.certificatePath = certificatePath;
+    }
+
+    @DataBoundSetter
+    public void setPassword(String password) {
+        this.password = password;
+    }
+
+    @DataBoundSetter
+    public void setTimestampServerUrl(String timestampServerUrl) {
+        this.timestampServerUrl = timestampServerUrl;
+    }
+
     @DataBoundSetter
     public void setOrchestratorAddress(String orchestratorAddress) {
         this.orchestratorAddress = orchestratorAddress;
@@ -445,6 +487,18 @@ public String getReleaseNotes() {
         return releaseNotes;
     }
 
+    public String getCertificatePath() {
+        return certificatePath;
+    }
+
+    public String getPassword() {
+        return password;
+    }
+
+    public String getTimestampServerUrl() {
+        return timestampServerUrl;
+    }
+
     /**
      * traceLevel
      *

src/main/java/com/uipath/uipathpackage/models/PackOptions.java

@@ -14,6 +14,9 @@ public class PackOptions extends CommonOptions {
     private String releaseNotes;
     private String version;
     private boolean autoVersion;
+    private String certificatePath;
+    private String certificatePassword;
+    private String timestampServerUrl;
 
     public boolean getAutoVersion() {
         return autoVersion;
@@ -118,4 +121,28 @@ public String getReleaseNotes() {
     public void setReleaseNotes(String releaseNotes) {
         this.releaseNotes = releaseNotes;
     }
+
+    public String getCertificatePath() {
+        return certificatePath;
+    }
+
+    public void setCertificatePath(String certificatePath) {
+        this.certificatePath = certificatePath;
+    }
+
+    public String getCertificatePassword() {
+        return certificatePassword;
+    }
+
+    public void setCertificatePassword(String certificatePassword) {
+        this.certificatePassword = certificatePassword;
+    }
+
+    public String getTimestampServerUrl() {
+        return timestampServerUrl;
+    }
+
+    public void setTimestampServerUrl(String timestampServerUrl) {
+        this.timestampServerUrl = timestampServerUrl;
+    }
 }

src/main/java/com/uipath/uipathpackage/models/solutions/SolutionPackOptions.java

@@ -13,6 +13,9 @@ public class SolutionPackOptions extends CommonOptions {
     private String projectUrl;
     private String releaseNotes;
     private String version;
+    private String certificatePath;
+    private String certificatePassword;
+    private String timestampServerUrl;
 
     public String getProjectPath() {
         return projectPath;
@@ -93,4 +96,28 @@ public String getReleaseNotes() {
     public void setReleaseNotes(String releaseNotes) {
         this.releaseNotes = releaseNotes;
     }
+
+    public String getCertificatePath() {
+        return certificatePath;
+    }
+
+    public void setCertificatePath(String certificatePath) {
+        this.certificatePath = certificatePath;
+    }
+
+    public String getCertificatePassword() {
+        return certificatePassword;
+    }
+
+    public void setCertificatePassword(String certificatePassword) {
+        this.certificatePassword = certificatePassword;
+    }
+
+    public String getTimestampServerUrl() {
+        return timestampServerUrl;
+    }
+
+    public void setTimestampServerUrl(String timestampServerUrl) {
+        this.timestampServerUrl = timestampServerUrl;
+    }
 }