blackduck test

.github/workflows/ci.yaml

@@ -95,15 +95,25 @@ jobs:
       - name: checkout
         uses: actions/checkout@v2
       
-      - uses: actions/setup-java@v3
-        with:
-          distribution: 'microsoft'
-          java-version: '11'
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2.4.1
 
-      # - name: blackduck scan
-      #   run: |
-      #     cd C:\Program Files\Eclipse Adoptium\jdk-11.0.18.10-hotspot\bin
-      #     java.exe -jar C:/blackduck/blackduck/synopsys-detect-8.3.0.jar  --detect.project.name=SA_edifoundation-oauth2proxy --detect.source.path=${{ github.workspace }} --detect.project.version.name=1.0 --blackduck.url=https://blackduck.philips.com/ --blackduck.trust.cert=true --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --detect.tools.excluded=BINARY_SCAN
+      - name: Scan blackduck
+        run: |
+          docker run -v ${{ github.workspace}}:/code \
+          philipssoftware/blackduck:8.5 \
+          /bin/bash -c \
+          "(cd /code && \
+          /app/detect.sh \
+          --blackduck.url=https://blackduck.philips.com \
+          --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \
+          --blackduck.trust.cert=true \
+          --detect.policy.check=true \
+          --detect.source.path=/code \
+          --detect.project.name=SA_edifoundation-oauth2proxy \
+          --detect.project.version.name=1.0 \
+          --detect.blackduck.signature.scanner.individual.file.matching=ALL \
+          --detect.bom.aggregate.name={agregator})"
     
   # Fortify:
   #   needs: [Init]