JenkinsSecretsChecker

pipeline {
    agent any
    stages {
	stage('Pull project code'){
		steps {
			echo 'downloading git directory..'
			git 'https://github.com/ibmappsec/GOAT.git'
		}
	}
	stage('Check git history for secrets'){
		steps{
		      script{
			echo 'running trufflehog to check project history for secrets'
			sh 'trufflehog --regex --entropy=False https://github.com/ibmappsec/GOAT'

		      }
		}
	}	    
    }
    post {
	always {
	    echo 'This will always run'
	}
	success {
	    echo 'This will run only if successful'
	}
	failure {
	    echo 'This will run only if failed'
	}
	unstable {
	    echo 'This will run only if the run was marked as unstable'
	}
	changed {
	    echo 'This will run only if the state of the Pipeline has changed'
	    echo 'For example, if the Pipeline was previously failing but is now successful'
	}
    }
}