CEC-1955 synopsys blackduck (#166)
* Testing the blackduck integration * Updated the depth to 0 * updated the scheduler
This commit is contained in:
40
.github/workflows/blackduck.yml
vendored
Normal file
40
.github/workflows/blackduck.yml
vendored
Normal file
@@ -0,0 +1,40 @@
|
|||||||
|
name: Blackduck
|
||||||
|
|
||||||
|
on:
|
||||||
|
schedule:
|
||||||
|
# run scans twice a month
|
||||||
|
- cron: "0 2 1,15 * *"
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
blackduck:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout Code
|
||||||
|
uses: actions/checkout@v2
|
||||||
|
|
||||||
|
- name: Use Node.js ${{ matrix.node-version }}
|
||||||
|
uses: actions/setup-node@v2
|
||||||
|
with:
|
||||||
|
node-version: "16"
|
||||||
|
cache: "npm"
|
||||||
|
- run: npm install
|
||||||
|
- run: npm run build
|
||||||
|
|
||||||
|
# ota-admin-portal
|
||||||
|
- name: Run Synopsys Detect - ota-admin-portal
|
||||||
|
uses: synopsys-sig/detect-action@v0.3.2
|
||||||
|
env:
|
||||||
|
DETECT_PROJECT_NAME: ota-admin-portal
|
||||||
|
DETECT_EXCLUDED_DIRECTORIES: node_modules
|
||||||
|
DETECT_PROJECT_VERSION_NAME: default
|
||||||
|
DETECT_NPM_INCLUDE_DEV_DEPENDENCIES: "FALSE"
|
||||||
|
# DETECT_DETECTOR_SEARCH_EXCLUSION_DEFAULTS: "true"
|
||||||
|
DETECT_DETECTOR_SEARCH_DEPTH: 0
|
||||||
|
DETECT_DETECTOR_SEARCH_CONTINUE: "true"
|
||||||
|
|
||||||
|
with:
|
||||||
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
detect-version: 7.9.0
|
||||||
|
blackduck-url: ${{ secrets.BLACKDUCK_URL }}
|
||||||
|
blackduck-api-token: ${{ secrets.BLACKDUCK_API_KEY }}
|
||||||
|
scan-mode: INTELLIGENT
|
||||||
Reference in New Issue
Block a user