From b9172cee05896814410724808f45069c4c1e44e8 Mon Sep 17 00:00:00 2001 From: aswin-in-philips Date: Fri, 17 Feb 2023 12:13:43 +0530 Subject: [PATCH] blackduck test --- .github/workflows/ci.yaml | 28 +++++++--------------------- 1 file changed, 7 insertions(+), 21 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index aecbf4fb..6f6c5925 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -92,27 +92,13 @@ jobs: #needs: [Init] runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v2.4.1 - - - name: Scan blackduck - run: | - docker run -v ${{ github.workspace}}:/code \ - philipssoftware/blackduck:8.5 \ - /bin/bash -c \ - "(cd /code && \ - /app/detect.sh \ - --blackduck.url=${{ secrets.BLACKDUCK_URL }} \ - --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \ - --blackduck.trust.cert=true \ - --detect.policy.check=true \ - --detect.source.path=/code \ - --detect.project.name=${{ secrets.BLACKDUCK_PROJECT }} \ - --detect.project.version.name=${{ secrets.BLACKDUCK_VERSION }} \ - --detect.blackduck.signature.scanner.individual.file.matching=ALL \ - --detect.bom.aggregate.name={agregator})" + - uses: philips-labs/blackduck-scanner-action@v1 + with: + token: ${{ secrets.BLACKDUCK_TOKEN }} + projectName: ${{ secrets.BLACKDUCK_PROJECT }} + versionPrefix: ${{ secrets.BLACKDUCK_VERSION }} + url: ${{ secrets.BLACKDUCK_URL }} + sourcePath: ${{ github.workspace}} # Fortify: # #needs: [Init]