philips-labs / blackduck-scanner-action Goto Github PK
View Code? Open in Web Editor NEWBlackDuck GItHub Action
License: MIT License
BlackDuck GItHub Action
License: MIT License
Currently the way the scanner action is built, it uses the node variant of the blackduck-docker
image.
There doesn't seem to be a way to easily pass in the base image to be used for the execution.
We need a way to support scanning .NET Core projects via this action. I see the blackduck-docker image has tags specific to .NET Core.
Could we change this action to be a composite run steps
based action which then builds the action's Dockerfile passing in the required docker image tag as an argument and then executes it.
I am available to contribute ๐๏ธ , need to agree on direction
Hi,
Thanks for your action but i am getting few errors even after adding project name and version name from Blackduck.
Here are the errors i got it when i execute my workflow:
i have passed my details as:
blackduck-url: https://blackduck.philips.com/
blackduck-token: ${{ secrets.BLACKDUCK_TOKEN_HTH }}
project: ES_saas-factory-edi-apigateway
version: saas-factory-edi-apigateway
and the errors are:
getting project api base url
/get-blackduck-report.sh: line 34: [: null: integer expression expected
| got project api base url: null
getting version api base url
/get-blackduck-report.sh: line 46: [: -eq: unary operator expected
| got version api base url:
creating SBOM report
| triggered creating SBOM report
getting SBOM report api base url
| attempt 1 of 50 to get SDPX report
ERROR: report_status is not COMPLETED, it is .
| - report_status:
##[debug]Docker Action run completed with exit code 1
Capture job id and query status of the query. Add a flag in the action that allows you to get notified when the BlackDuck result is in.
The extraArgs
are ignored...
Deprecate this action, because we are pushing people to use the official SynopSys Detect action: https://github.com/synopsys-sig/detect-action
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.