From 837d2748eb487de30fc2bb6c91dae046efb27be5 Mon Sep 17 00:00:00 2001 From: aswin-in-philips Date: Tue, 28 Mar 2023 14:41:17 +0530 Subject: [PATCH] adding blackduck scan --- .github/workflows/ci.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 0118bbe8..e4e08cdd 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -100,9 +100,9 @@ jobs: docker login docker.na1.hsdp.io --username '${{ secrets.DOCKER_USER }}' --password '${{ secrets.DOCKER_PSWD }}' docker pull docker.na1.hsdp.io/edi/edi-foundation-oauth2-proxy:1.0.27-beta - # - name: Scan blackduck - # run: | - # docker run -v ${{ github.workspace}}:/code philipssoftware/blackduck:8.5 /bin/bash -c "(cd /code && /app/detect.sh --blackduck.url=https://blackduck.philips.com --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --blackduck.trust.cert=true --detect.policy.check=true --detect.source.path=/code --detect.project.name=SA_edifoundation-oauth2proxy --detect.project.version.name=1.0 --detect.blackduck.signature.scanner.individual.file.matching=ALL --detect.bom.aggregate.name={agregator})" + - name: Scan blackduck + run: | + docker run -v ${{ github.workspace}}:/code philipssoftware/blackduck:8.5 /bin/bash -c "(cd /code && /app/detect.sh --detect.project.name=SA_edifoundation-oauth2proxy --detect.project.version.name=1.0 --blackduck.url=https://blackduck.philips.com/ --blackduck.trust.cert=true --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --detect.tools.excluded=BINARY_SCAN --detect.docker.image=docker.na1.hsdp.io/edi/edi-foundation-oauth2-proxy:1.0.27-beta)" # Fortify: # needs: [Init]