MLE-22024: Add BlackDuck scan for latest images

[rwinieski]

Description

Checklist:

• Owner:

• JIRA_ID as part of branch/PR name

• Rebase the branch with upstream

• Squashed all commits into a single commit

• Added Tests

• Reviewer:

• Reviewed Tests

• Added to Release Wiki/Jira

[Copilot]

Pull Request Overview

Adds a new option to trigger BlackDuck scans against all “latest” MarkLogic Docker images from DockerHub, with scheduling support.

• Extended scanWithBlackDuck to accept a scanType parameter (current or latest) and fetch tags via curl/jq.
• Introduced SCAN_LATEST_IMAGES boolean parameter and a dedicated pipeline stage for manual or scheduled “latest” scans.
• Updated parameterizedCron to run weekly scans of all latest images on Mondays at 1 AM.

Comments suppressed due to low confidence (2)

Jenkinsfile:591

• There are no tests verifying the new 'latest' scan path; consider adding unit or integration tests for scanWithBlackDuck('latest') to ensure tag parsing and job triggering behave as expected.

            when {

Jenkinsfile:484

• [nitpick] While the parameter description is clear, consider updating the top-level pipeline comments or README to explain the new SCAN_LATEST_IMAGES flag and its scheduled usage for maintainers.

        booleanParam(name: 'SCAN_LATEST_IMAGES', defaultValue: false, description: 'Scan all latest standard MarkLogic Docker images from DockerHub with BlackDuck')

[Copilot]

The variable 'allImages' simply aliases 'dockerHubImages'; consider removing this redundant assignment and using 'dockerHubImages' directly to reduce indirection.

Suggested change

	// Use only the standard MarkLogic Docker images
	def allImages = dockerHubImages
	// Filter out empty lines and create comma-separated list
	def imageList = allImages.split('\n').findAll { it.trim() != '' }.join(',')
	// Filter out empty lines and create comma-separated list
	def imageList = dockerHubImages.split('\n').findAll { it.trim() != '' }.join(',')

[Copilot]

Limiting 'page_size=100' may miss tags if the repository grows beyond 100; consider implementing pagination to ensure all 'latest-*' tags are retrieved.

Suggested change

	curl -s "https://hub.docker.com/v2/repositories/marklogic/marklogic-server/tags?page_size=100" | \
	jq -r '.results[] | select(.name | startswith("latest-")) | "marklogic/marklogic-server:" + .name'
	page=1
	all_tags=""
	while true; do
	response=$(curl -s "https://hub.docker.com/v2/repositories/marklogic/marklogic-server/tags?page_size=100&page=$page")
	tags=$(echo "$response" | jq -r '.results[] | select(.name | startswith("latest-")) | "marklogic/marklogic-server:" + .name')
	if [ -z "$tags" ]; then
	break
	fi
	all_tags="$all_tags\n$tags"
	page=$((page + 1))
	done
	echo -e "$all_tags" | sed '/^$/d'

[Copilot]

[nitpick] This stage can be triggered on any branch when SCAN_LATEST_IMAGES=true; consider adding a branch filter (e.g., only on 'develop') to avoid unintended scans on feature or release branches.