From 594175bd3027ee7b52f9f7af61c55f02b37540bf Mon Sep 17 00:00:00 2001 From: aswin-in-philips Date: Fri, 17 Feb 2023 12:30:36 +0530 Subject: [PATCH] blackduck test --- .github/workflows/ci.yaml | 25 +++++-------------------- build/ps/Invoke-BlackDuckDetect.ps1 | 2 +- 2 files changed, 6 insertions(+), 21 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 5b692c61..53827e6d 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -90,29 +90,14 @@ jobs: BlackduckScan: #needs: [Init] - runs-on: ubuntu-20.04 + runs-on: builder_blr steps: - - uses: actions/checkout@v2 + - name: checkout + uses: actions/checkout@v2 - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v2.4.1 + - name: blackduck scan + run: powershell -ExecutionPolicy RemoteSigned -NoExit -File ${{ github.workspace }}\Build\PS\Invoke-BlackduckDetect.ps1 -SourcePath ${{ github.workspace }} -ApiToken ${{ secrets.BLACKDUCK_TOKEN }} - - name: Scan blackduck - run: | - docker run -v ${{ github.workspace}}:/code \ - philipssoftware/blackduck:8.5 \ - /bin/bash -c \ - "(cd /code && \ - /app/detect.sh \ - --blackduck.url=${https://blackduck.philips.com} \ - --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \ - --blackduck.trust.cert=true \ - --detect.policy.check=true \ - --detect.source.path=/code \ - --detect.project.name=${SA_edifoundation-oauth2proxy} \ - --detect.project.version.name=${1.0} \ - --detect.blackduck.signature.scanner.individual.file.matching=ALL \ - --detect.bom.aggregate.name={agregator})" # Fortify: # #needs: [Init] diff --git a/build/ps/Invoke-BlackDuckDetect.ps1 b/build/ps/Invoke-BlackDuckDetect.ps1 index d9fd1fd2..04c541d1 100644 --- a/build/ps/Invoke-BlackDuckDetect.ps1 +++ b/build/ps/Invoke-BlackDuckDetect.ps1 @@ -3,7 +3,7 @@ param( $ProjectVersionName = "1.0", $SourcePath, $BlackduckUrl = "https://blackduck.philips.com/", - $ApiToken = "OWFkOWM0NGMtM2FlMy00ODFiLThjMTctM2I1OTdkMTY2MTQ2OmNlMGI4NmNhLWRjMzAtNGU0Yy04NTIwLWEzZDI5NDFlNjdkMg==", + $ApiToken, $ProxyHost = "apac.zscaler.philips.com", $ProxyPort = "10015", $ProxyIgnoreHosts = "blackduck.philips.com"