test this out #1
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Blackduck Scan V2 | |
| on: | |
| push: | |
| jobs: | |
| build: | |
| runs-on: [ self-hosted ] | |
| steps: | |
| - name: Checkout Source | |
| uses: actions/checkout@v3 | |
| - name: Black Duck Scan | |
| uses: synopsys-sig/[email protected] | |
| ### Configure DETECT environment variables | |
| env: | |
| DETECT_PROJECT_NAME: "Terraform NetApp ONTAP Provider" | |
| DETECT_PROJECT_VERSION_NAME: 1.1.0 | |
| DETECT_CODE_LOCATION_NAME: "Terraform NetApp ONTAP Provider_1.1.0_code" | |
| DETECT_BOM_AGGREGATE_NAME: "Terraform NetApp ONTAP Provider_1.1.0_bom" | |
| DETECT_DETECTOR_BUILDLESS: false | |
| with: | |
| ### SCANNING: Required fields | |
| blackduck_url: ${{ secrets.BLACKDUCK_STAG_URL }} | |
| blackduck_token: ${{ secrets.BLACKDUCK_STAG_API_TOKEN }} | |
| ### SCANNING: Optional fields | |
| # blackduck_scan_failure_severities: 'BLOCKER,CRITICAL' | |
| ### FIX PULL REQUEST CREATION: Uncomment below to enable | |
| # blackduck_fixpr_enabled: true | |
| # github_token: ${{ secrets.GITHUB_TOKEN }} # Required when Fix PRs is enabled | |
| ### PULL REQUEST COMMENTS: Uncomment below to enable | |
| # blackduck_prcomment_enabled: true | |
| # github_token: ${{ secrets.GITHUB_TOKEN }} # Required when PR comments is enabled | |
| ### SARIF report generation and upload to GitHub Adavanced Security: Uncomment below to enable | |
| blackduck_reports_sarif_create: true # Create Black Duck SARIF report and upload it as artifact | |
| blackduck_upload_sarif_report: true # Upload Black Duck SARIF report in GitHub Advanced Security tab | |
| github_token: ${{ secrets.GITHUB_TOKEN }} # Required when blackduck_upload_sarif_report is set as true |