From 11821d5a98d09d3051b3fe070eb33e3fd04514c7 Mon Sep 17 00:00:00 2001
From: aswin-in-philips <aswin.s@philips.com>
Date: Mon, 4 Apr 2022 12:43:56 +0530
Subject: [PATCH] Adding Fortify and Blackduck scans

---
 .github/workflows/Blackduck.yaml | 27 ------------------
 .github/workflows/Scans.yaml     | 48 ++++++++++++++++++++++++++++++++
 2 files changed, 48 insertions(+), 27 deletions(-)
 delete mode 100644 .github/workflows/Blackduck.yaml
 create mode 100644 .github/workflows/Scans.yaml

diff --git a/.github/workflows/Blackduck.yaml b/.github/workflows/Blackduck.yaml
deleted file mode 100644
index c4fb2581..00000000
--- a/.github/workflows/Blackduck.yaml
+++ /dev/null
@@ -1,27 +0,0 @@
-# This is a basic workflow to help you get started with Actions
-
-name: Blackduck scan
-
-# Controls when the action will run. 
-on:
-  # Triggers the workflow on push or pull request events but only for the main branch
-  push:
-    branches: [ main ]
-
-  # Allows you to run this workflow manually from the Actions tab
-  workflow_dispatch:
-
-# A workflow run is made up of one or more jobs that can run sequentially or in parallel
-jobs:
-  # This workflow contains a single job called "build"
-  build:
-    # The type of runner that the job will run on
-    runs-on: builder_blr
-
-    # Steps represent a sequence of tasks that will be executed as part of the job
-    steps:
-      - name: checkout
-        uses: actions/checkout@v2
-        
-      - name: blackduck scan
-        run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}
diff --git a/.github/workflows/Scans.yaml b/.github/workflows/Scans.yaml
new file mode 100644
index 00000000..5f8c8ed6
--- /dev/null
+++ b/.github/workflows/Scans.yaml
@@ -0,0 +1,48 @@
+name: Scan
+
+on:
+  push:
+    branches: 'edi-foundation-integration'
+
+env:
+  HSDP_DOCKER_HOST: docker.na1.hsdp.io
+
+jobs:
+  Init:
+    runs-on: ubuntu-20.04
+    container:
+      image: docker.na1.hsdp.io/edi/build-env:master-45
+      credentials:
+        username: ${{ secrets.HSDP_DOCKER_USER }}
+        password: ${{ secrets.HSDP_DOCKER_PASSWORD }}
+    outputs:
+      branchName: ${{ steps.branch.outputs.branch_name }}
+      ciFullImageName: "${{ env.HSDP_DOCKER_HOST }}/edi/edi-foundation-oauth2-proxy:${{ steps.branch.outputs.branch_name }}-${{ github.run_number }}"
+      rcFullImageName: "${{ env.HSDP_DOCKER_HOST }}/edi/edi-foundation-oauth2-proxy:${{ steps.branch.outputs.branch_name }}-${{ github.run_number }}-rc"
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Extract branch name
+        uses: vazco/github-actions-branch-name@v1
+        id: branch
+
+  Blackduck:
+    needs: [Init]
+    runs-on: builder_blr
+    steps:
+      - name: checkout
+        uses: actions/checkout@v2
+
+      - name: blackduck scan
+        run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }}
+
+  Fortify:
+    needs: [Init]
+    runs-on: builder_blr
+    steps:
+      - name: checkout
+        uses: actions/checkout@v2
+        
+      - name: Fortify scan
+        run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1
\ No newline at end of file