From a9def5ea4de08ea780820436fd17a238ce6ea3ea Mon Sep 17 00:00:00 2001 From: aswin-in-philips Date: Fri, 17 Feb 2023 11:40:11 +0530 Subject: [PATCH] test --- .github/workflows/ci.yaml | 6 +++--- build/ps/Invoke-FortifyScan.ps1 | 5 +++-- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 9a5dd475..5b54e97e 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -104,13 +104,13 @@ jobs: /bin/bash -c \ "(cd /code && \ /app/detect.sh \ - --blackduck.url=https://blackduck.philips.com \ + --blackduck.url='https://blackduck.philips.com' \ --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \ --blackduck.trust.cert=true \ --detect.policy.check=true \ --detect.source.path=/code \ - --detect.project.name=edifoundation-apigatewaytokenauthenticator \ - --detect.project.version.name=1.0 \ + --detect.project.name='edifoundation-apigatewaytokenauthenticator' \ + --detect.project.version.name='1.0' \ --detect.blackduck.signature.scanner.individual.file.matching=ALL \ --detect.bom.aggregate.name={agregator})" diff --git a/build/ps/Invoke-FortifyScan.ps1 b/build/ps/Invoke-FortifyScan.ps1 index 6c6ec8ba..844860f0 100644 --- a/build/ps/Invoke-FortifyScan.ps1 +++ b/build/ps/Invoke-FortifyScan.ps1 @@ -26,9 +26,10 @@ try { & sourceanalyzer -b $FortifyBuildId -clean -logfile "$PSScriptRoot\fortify-clean.txt" - & sourceanalyzer -Xmx8G -b $FortifyBuildId "$RepositoryRoot\contrib" + & sourceanalyzer -Xmx8G -b $FortifyBuildId -gopath $RepositoryRoot -goroot $RepositoryRoot "$RepositoryRoot\**\*.go" & sourceanalyzer -b $FortifyBuildId -show-files - & sourceanalyzer -Xmx8G -b $FortifyBuildId -Dcom.fortify.sca.Phase0HigherOrder.Languages=go -scan -f $FortifyFprPath -logfile "$PSScriptRoot\fortify-scan.txt" + #& sourceanalyzer -Xmx8G -b $FortifyBuildId -Dcom.fortify.sca.Phase0HigherOrder.Languages=go -scan -f $FortifyFprPath -logfile "$PSScriptRoot\fortify-scan.txt" + & sourceanalyzer -Xmx8G -b $FortifyBuildId -logfile "$PSScriptRoot\fortify-scan.txt" -scan -f $FortifyFprPath #Upload fpr reports to fortify server Write-Output "Uploading '$FortifyFprPath' of '$FortifyProjectId' with version '$FortifyVersionId' to '$PublishURL'"