Merge pull request #7283 from corda/connelm/merge-snyk-delta-46-47-2022-12-12

INFRA-1904: Merging forward snyk delta from 4.6 to 4.7 (2022-12-12)

.ci/dev/pr-code-checks/Jenkinsfile

@@ -11,6 +11,14 @@ pipeline {
         buildDiscarder(logRotator(daysToKeepStr: '14', artifactDaysToKeepStr: '14'))
     }
 
+    /*
+     * List environment variables in alphabetical order
+     */
+    environment {
+        SNYK_API_TOKEN = credentials('c4-os-snyk-api-token-secret')
+        C4_OS_SNYK_ORG_ID = credentials('c4-os-snyk-org-id')
+    }
+
     stages {
         stage('Detekt check') {
             steps {
@@ -24,6 +32,25 @@ pipeline {
             }
         }
 
+        stage('Snyk Delta') {
+            agent {
+                docker {
+                    image 'build-zulu-openjdk:8'
+                    reuseNode true
+                    registryUrl 'https://engineering-docker.software.r3.com/'
+                    registryCredentialsId 'artifactory-credentials'
+                    args '-v /tmp:/host_tmp'
+                }
+            }
+            environment {
+                GRADLE_USER_HOME = "/host_tmp/gradle"
+            }
+            steps {
+                sh 'mkdir -p ${GRADLE_USER_HOME}'
+                snykDeltaScan(env.SNYK_API_TOKEN, env.C4_OS_SNYK_ORG_ID)
+            }
+        }
+
         stage('No API change check') {
             steps {
                 sh "./gradlew --no-daemon generateApi"