From 43b9edc4c033d4e4c803adad9884d5ad486a5649 Mon Sep 17 00:00:00 2001 From: aswin-in-philips Date: Fri, 17 Feb 2023 12:05:13 +0530 Subject: [PATCH] adding secrets --- .github/workflows/ci.yaml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 63c9dc5c..aecbf4fb 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -104,25 +104,25 @@ jobs: /bin/bash -c \ "(cd /code && \ /app/detect.sh \ - --blackduck.url='https://blackduck.philips.com' \ + --blackduck.url=${{ secrets.BLACKDUCK_URL }} \ --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \ --blackduck.trust.cert=true \ --detect.policy.check=true \ --detect.source.path=/code \ - --detect.project.name={edifoundation-apigatewaytokenauthenticator} \ - --detect.project.version.name={1.0} \ + --detect.project.name=${{ secrets.BLACKDUCK_PROJECT }} \ + --detect.project.version.name=${{ secrets.BLACKDUCK_VERSION }} \ --detect.blackduck.signature.scanner.individual.file.matching=ALL \ --detect.bom.aggregate.name={agregator})" - Fortify: - #needs: [Init] - runs-on: builder_blr_2 - steps: - - name: checkout - uses: actions/checkout@v2 + # Fortify: + # #needs: [Init] + # runs-on: builder_blr_2 + # steps: + # - name: checkout + # uses: actions/checkout@v2 - - name: Fortify scan - run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1 -PublishAuthToken ${{ secrets.FORTIFY_TOKEN }} + # - name: Fortify scan + # run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\build\ps\Invoke-FortifyScan.ps1 -PublishAuthToken ${{ secrets.FORTIFY_TOKEN }} # Build: # needs: [Init]