From e4fb0475cca3ab0eb585dd2fc0b679732030f7c9 Mon Sep 17 00:00:00 2001 From: Black Duck Date: Thu, 9 Apr 2026 15:40:16 +0000 Subject: [PATCH 1/2] Black Duck Security: Automatic pull request to commit blackducksca-workflow.yml --- .github/workflows/blackducksca-workflow.yml | 31 +++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/blackducksca-workflow.yml diff --git a/.github/workflows/blackducksca-workflow.yml b/.github/workflows/blackducksca-workflow.yml new file mode 100644 index 0000000..7bbf63b --- /dev/null +++ b/.github/workflows/blackducksca-workflow.yml @@ -0,0 +1,31 @@ +# Quickstart: Black Duck Security Scan Action with blackducksca: +# https://documentation.blackduck.com/bundle/bridge/page/documentation/t_github-blackduck-quickstart.html +name: Black Duck Security Scan +on: + push: + branches: + - main + - master + pull_request: + branches: + - main + - master + workflow_dispatch: {} +jobs: + blackducksca: + runs-on: ubuntu-latest + steps: + - name: Checkout Source + uses: actions/checkout@v4 + - name: Black Duck Security Scan + id: black-duck-security-scan + uses: blackduck-inc/black-duck-security-scan@v2 + with: + blackducksca_url: ${{ vars.BLACKDUCKSCA_URL }} + blackducksca_token: ${{ secrets.BLACKDUCKSCA_TOKEN }} + blackducksca_scan_full: true + blackducksca_scan_failure_severities: 'NONE' + mark_build_status: success + env: + DETECT_PROJECT_VERSION_NAME: master + continue-on-error: true From d05972084f975d74d69915ff17fbe6a387e52846 Mon Sep 17 00:00:00 2001 From: rjmohankumar Date: Fri, 17 Apr 2026 10:06:53 +0000 Subject: [PATCH 2/2] Add Python setup and dependency installation to Black Duck workflow --- .github/workflows/blackducksca-workflow.yml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/blackducksca-workflow.yml b/.github/workflows/blackducksca-workflow.yml index 7bbf63b..363ae38 100644 --- a/.github/workflows/blackducksca-workflow.yml +++ b/.github/workflows/blackducksca-workflow.yml @@ -17,6 +17,14 @@ jobs: steps: - name: Checkout Source uses: actions/checkout@v4 + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: '3.11' + - name: Install dependencies + run: | + python -m pip install --upgrade pip + pip install . - name: Black Duck Security Scan id: black-duck-security-scan uses: blackduck-inc/black-duck-security-scan@v2