Quickstart: Jenkins Black Duck Security Scan Plugin with Coverity

pipeline {
    agent { label 'node' }
    environment {
        REPO_NAME = "${env.GIT_URL.tokenize('/.')[-2]}"
        FULLSCAN = "${env.BRANCH_NAME ==~ /^(main|master|develop|stage|release)$/ ? 'true' : 'false'}"
        PRSCAN = "${env.CHANGE_TARGET ==~ /^(main|master|develop|stage|release)$/ ? 'true' : 'false'}"
    }
    // Uncomment the tools section below for compiled languages
    // tools {
    //     maven 'maven-3'
    //     jdk 'openjdk-21'
    // }
    stages {
        // Uncomment the Build stage below for compiled languages
        // stage('Build') {
        //     steps {
        //         sh 'mvn -B package'
        //     }
        // }
        stage('Coverity') {
            when {
                anyOf {
                    environment name: 'FULLSCAN', value: 'true'
                    environment name: 'PRSCAN', value: 'true'
                }
            }
            steps {
                security_scan product: 'coverity',
                    coverity_project_name: "$REPO_NAME",
                    coverity_stream_name: "$REPO_NAME-$BRANCH_NAME",
                    coverity_args: "-o commit.connect.description=$BUILD_TAG",
                    coverity_policy_view: 'Outstanding Issues',
                    coverity_prComment_enabled: true,
                    
                    // Uncomment the coverity_prComment_impacts line below to
                    // add comments for issues filtered by impact. Default is High if unset
                    // NOTE: Issues matching coverity_policy_view are ignored if set
                    // coverity_prComment_impacts: 'High'
                    
                    // Uncomment the coverity_local line below if using traditional Coverity deployments or 
                    // Cloud Native Coverity (CNC) with scan services disabled
                    // coverity_local: true,
                    
                    // Uncomment the build and clean commands below for compiled languages
                    // coverity_build_command: 'mvn -B -DskipTests package',
                    // coverity_clean_command: 'mvn -B clean',
                    include_diagnostics: false,
                    mark_build_status: 'UNSTABLE'
            }
        }
    }
    post {
        always {
            cleanWs()
        }
    }
}