Adding Fortify and Blackduck scans

This commit is contained in:
aswin-in-philips 2022-04-04 12:43:56 +05:30
parent a79aeb9b36
commit 11821d5a98
2 changed files with 48 additions and 27 deletions

View File

@ -1,27 +0,0 @@
# This is a basic workflow to help you get started with Actions
name: Blackduck scan
# Controls when the action will run.
on:
# Triggers the workflow on push or pull request events but only for the main branch
push:
branches: [ main ]
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch:
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
# This workflow contains a single job called "build"
build:
# The type of runner that the job will run on
runs-on: builder_blr
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
- name: checkout
uses: actions/checkout@v2
- name: blackduck scan
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}

48
.github/workflows/Scans.yaml vendored Normal file
View File

@ -0,0 +1,48 @@
name: Scan
on:
push:
branches: 'edi-foundation-integration'
env:
HSDP_DOCKER_HOST: docker.na1.hsdp.io
jobs:
Init:
runs-on: ubuntu-20.04
container:
image: docker.na1.hsdp.io/edi/build-env:master-45
credentials:
username: ${{ secrets.HSDP_DOCKER_USER }}
password: ${{ secrets.HSDP_DOCKER_PASSWORD }}
outputs:
branchName: ${{ steps.branch.outputs.branch_name }}
ciFullImageName: "${{ env.HSDP_DOCKER_HOST }}/edi/edi-foundation-oauth2-proxy:${{ steps.branch.outputs.branch_name }}-${{ github.run_number }}"
rcFullImageName: "${{ env.HSDP_DOCKER_HOST }}/edi/edi-foundation-oauth2-proxy:${{ steps.branch.outputs.branch_name }}-${{ github.run_number }}-rc"
steps:
- uses: actions/checkout@v2
- name: Extract branch name
uses: vazco/github-actions-branch-name@v1
id: branch
Blackduck:
needs: [Init]
runs-on: builder_blr
steps:
- name: checkout
uses: actions/checkout@v2
- name: blackduck scan
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}
Fortify:
needs: [Init]
runs-on: builder_blr
steps:
- name: checkout
uses: actions/checkout@v2
- name: Fortify scan
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1