Giter Club home page Giter Club logo

blackduck-scanner-action's Introduction

Black Duck Scanner action

Warning. This action is no longer maintained. Synopsys released their own action. Please use theirs!

A Github action for running Black Duck analysis on your codebase inside a Docker container.

Required parameters

Parameter Description
projectName Your project name in BlackDuck
versionPrefix Version prefix
token Black Duck token token
url Black Duck server url
sourePath source path
extraArgs Extra arguments that will be passed to the detector

Sample Configuration

To prevent your token from showing in the runner's output, it is advised to store the token configuration inside of a github secret variable.

The listing below uses the secret BLACKDUCK_TOKEN from your project's configuration.

blackduck:
  name: BlackDuck
  runs-on: self-hosted
  steps:
    - uses: philips-labs/blackduck-scanner-action@v1
      with:
        token: ${{ secrets.BLACKDUCK_TOKEN }}
        projectName: Your project name
        versionPrefix: You version prefix
        url: https://your.black.duck.swamp/
        sourcePath: /code
        extraArgs: --detect.yarn.prod.only=true

blackduck-scanner-action's People

Contributors

bartgolsteijn avatar daanoz avatar jeroenknoops avatar npalm avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar

blackduck-scanner-action's Issues

Getting errors even after added project name and version name in the workflow

Hi,

Thanks for your action but i am getting few errors even after adding project name and version name from Blackduck.
Here are the errors i got it when i execute my workflow:
i have passed my details as:
blackduck-url: https://blackduck.philips.com/
blackduck-token: ${{ secrets.BLACKDUCK_TOKEN_HTH }}
project: ES_saas-factory-edi-apigateway
version: saas-factory-edi-apigateway

and the errors are:

  • getting project api base url
    /get-blackduck-report.sh: line 34: [: null: integer expression expected
    | got project api base url: null

  • getting version api base url
    /get-blackduck-report.sh: line 46: [: -eq: unary operator expected
    | got version api base url:

  • creating SBOM report
    | triggered creating SBOM report

  • getting SBOM report api base url
    | attempt 1 of 50 to get SDPX report
    ERROR: report_status is not COMPLETED, it is .
    | - report_status:
    ##[debug]Docker Action run completed with exit code 1

Support additional .NET Core Nuget scanner through action

Currently the way the scanner action is built, it uses the node variant of the blackduck-docker image.

There doesn't seem to be a way to easily pass in the base image to be used for the execution.

We need a way to support scanning .NET Core projects via this action. I see the blackduck-docker image has tags specific to .NET Core.

Could we change this action to be a composite run steps based action which then builds the action's Dockerfile passing in the required docker image tag as an argument and then executes it.

I am available to contribute ๐Ÿ–๏ธ , need to agree on direction

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.