Adding Fortify and Blackduck scans
This commit is contained in:
parent
a79aeb9b36
commit
11821d5a98
|
|
@ -1,27 +0,0 @@
|
|||
# This is a basic workflow to help you get started with Actions
|
||||
|
||||
name: Blackduck scan
|
||||
|
||||
# Controls when the action will run.
|
||||
on:
|
||||
# Triggers the workflow on push or pull request events but only for the main branch
|
||||
push:
|
||||
branches: [ main ]
|
||||
|
||||
# Allows you to run this workflow manually from the Actions tab
|
||||
workflow_dispatch:
|
||||
|
||||
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
|
||||
jobs:
|
||||
# This workflow contains a single job called "build"
|
||||
build:
|
||||
# The type of runner that the job will run on
|
||||
runs-on: builder_blr
|
||||
|
||||
# Steps represent a sequence of tasks that will be executed as part of the job
|
||||
steps:
|
||||
- name: checkout
|
||||
uses: actions/checkout@v2
|
||||
|
||||
- name: blackduck scan
|
||||
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}
|
||||
|
|
@ -0,0 +1,48 @@
|
|||
name: Scan
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: 'edi-foundation-integration'
|
||||
|
||||
env:
|
||||
HSDP_DOCKER_HOST: docker.na1.hsdp.io
|
||||
|
||||
jobs:
|
||||
Init:
|
||||
runs-on: ubuntu-20.04
|
||||
container:
|
||||
image: docker.na1.hsdp.io/edi/build-env:master-45
|
||||
credentials:
|
||||
username: ${{ secrets.HSDP_DOCKER_USER }}
|
||||
password: ${{ secrets.HSDP_DOCKER_PASSWORD }}
|
||||
outputs:
|
||||
branchName: ${{ steps.branch.outputs.branch_name }}
|
||||
ciFullImageName: "${{ env.HSDP_DOCKER_HOST }}/edi/edi-foundation-oauth2-proxy:${{ steps.branch.outputs.branch_name }}-${{ github.run_number }}"
|
||||
rcFullImageName: "${{ env.HSDP_DOCKER_HOST }}/edi/edi-foundation-oauth2-proxy:${{ steps.branch.outputs.branch_name }}-${{ github.run_number }}-rc"
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v2
|
||||
|
||||
- name: Extract branch name
|
||||
uses: vazco/github-actions-branch-name@v1
|
||||
id: branch
|
||||
|
||||
Blackduck:
|
||||
needs: [Init]
|
||||
runs-on: builder_blr
|
||||
steps:
|
||||
- name: checkout
|
||||
uses: actions/checkout@v2
|
||||
|
||||
- name: blackduck scan
|
||||
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}
|
||||
|
||||
Fortify:
|
||||
needs: [Init]
|
||||
runs-on: builder_blr
|
||||
steps:
|
||||
- name: checkout
|
||||
uses: actions/checkout@v2
|
||||
|
||||
- name: Fortify scan
|
||||
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1
|
||||
Loading…
Reference in New Issue