Warning. This action is no longer maintained. Synopsys released their own action. Please use theirs!
A Github action for running Black Duck analysis on your codebase inside a Docker container.
| Parameter | Description |
|---|---|
| projectName | Your project name in BlackDuck |
| versionPrefix | Version prefix |
| token | Black Duck token token |
| url | Black Duck server url |
| sourePath | source path |
| extraArgs | Extra arguments that will be passed to the detector |
To prevent your token from showing in the runner's output, it is advised to store the token configuration inside of a github secret variable.
The listing below uses the secret BLACKDUCK_TOKEN from your project's configuration.
blackduck:
name: BlackDuck
runs-on: self-hosted
steps:
- uses: philips-labs/blackduck-scanner-action@v1
with:
token: ${{ secrets.BLACKDUCK_TOKEN }}
projectName: Your project name
versionPrefix: You version prefix
url: https://your.black.duck.swamp/
sourcePath: /code
extraArgs: --detect.yarn.prod.only=true
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent