From bb66257a24a6ef6da46dc2aa5c93512ee777fd28 Mon Sep 17 00:00:00 2001
From: aswin-in-philips <aswin.s@philips.com>
Date: Tue, 28 Mar 2023 12:26:30 +0530
Subject: [PATCH] blackduck test

---
 .github/workflows/ci.yaml | 26 ++++++++++++++++++--------
 1 file changed, 18 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 6e3f41bb..11e1be49 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -95,15 +95,25 @@ jobs:
       - name: checkout
         uses: actions/checkout@v2
       
-      - uses: actions/setup-java@v3
-        with:
-          distribution: 'microsoft'
-          java-version: '11'
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2.4.1
 
-      # - name: blackduck scan
-      #   run: |
-      #     cd C:\Program Files\Eclipse Adoptium\jdk-11.0.18.10-hotspot\bin
-      #     java.exe -jar C:/blackduck/blackduck/synopsys-detect-8.3.0.jar  --detect.project.name=SA_edifoundation-oauth2proxy --detect.source.path=${{ github.workspace }} --detect.project.version.name=1.0 --blackduck.url=https://blackduck.philips.com/ --blackduck.trust.cert=true --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --detect.tools.excluded=BINARY_SCAN
+      - name: Scan blackduck
+        run: |
+          docker run -v ${{ github.workspace}}:/code \
+          philipssoftware/blackduck:8.5 \
+          /bin/bash -c \
+          "(cd /code && \
+          /app/detect.sh \
+          --blackduck.url=https://blackduck.philips.com \
+          --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} \
+          --blackduck.trust.cert=true \
+          --detect.policy.check=true \
+          --detect.source.path=/code \
+          --detect.project.name=SA_edifoundation-oauth2proxy \
+          --detect.project.version.name=1.0 \
+          --detect.blackduck.signature.scanner.individual.file.matching=ALL \
+          --detect.bom.aggregate.name={agregator})"
     
   # Fortify:
   #   needs: [Init]