blackduck test

This commit is contained in:
aswin-in-philips 2023-02-17 12:30:36 +05:30
parent e63942f143
commit 594175bd30
2 changed files with 6 additions and 21 deletions

View File

@ -90,29 +90,14 @@ jobs:
BlackduckScan:
#needs: [Init]
runs-on: ubuntu-20.04
runs-on: builder_blr
steps:
- uses: actions/checkout@v2
- name: checkout
uses: actions/checkout@v2
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2.4.1
- name: blackduck scan
run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }} -ApiToken ${{ secrets.BLACKDUCK_TOKEN }}
- name: Scan blackduck
run: |
docker run -v ${{ github.workspace}}:/code \
philipssoftware/blackduck:8.5 \
/bin/bash -c \
"(cd /code && \
/app/detect.sh \
--blackduck.url=${https://blackduck.philips.com} \
--blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \
--blackduck.trust.cert=true \
--detect.policy.check=true \
--detect.source.path=/code \
--detect.project.name=${SA_edifoundation-oauth2proxy} \
--detect.project.version.name=${1.0} \
--detect.blackduck.signature.scanner.individual.file.matching=ALL \
--detect.bom.aggregate.name={agregator})"
# Fortify:
# #needs: [Init]

View File

@ -3,7 +3,7 @@ param(
$ProjectVersionName = "1.0",
$SourcePath,
$BlackduckUrl = "https://blackduck.philips.com/",
$ApiToken = "OWFkOWM0NGMtM2FlMy00ODFiLThjMTctM2I1OTdkMTY2MTQ2OmNlMGI4NmNhLWRjMzAtNGU0Yy04NTIwLWEzZDI5NDFlNjdkMg==",
$ApiToken,
$ProxyHost = "apac.zscaler.philips.com",
$ProxyPort = "10015",
$ProxyIgnoreHosts = "blackduck.philips.com"