blackduck-community/Black Duck Sarif Formatter
Will use Black Duck API to create sarif format outputfile from it.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| blackduck_log_level | Logging level | no | DEBUG |
| blackduck_url | Black DuckURL | yes | — |
| blackduck_apiToken | Black Duck Access token | yes | — |
| blackduck_project | Black Duck project name | no | ${{github.repository}} |
| blackduck_version | Black Duck project version name | no | ${{github.ref_name}} |
| blackduck_policy_categories | Comma separated list of policy categories, which violations will affect. Options are [COMPONENT,SECURITY,LICENSE,UNCATEGORIZED,OPERATIONAL], default=SECURITY,LICENSE | no | SECURITY,LICENSE |
| blackduck_outputFile | Filename with path where it will be created, example: github.workspace/blackduckFindings.sarif.json (default) | no | ${{github.workspace}}/blackduckFindings.sarif.json |
| blackduck_policies | If given, policy information is added | no | false |
| blackduck_iac | If given, iac findings are added | no | false |
| blackduck_scan_full | false for rapid scan results and true for intelligent scan, default false | no | false |
| blackduck_scanOutputPath | If blackduck_scan_full = false, then this is required. Rapid scan output folder. You must specify scan output folder with --detect.scan.output.path when running the Rapid scan with Black Duck and then give the same folder here, if you want to have rapid scan results as a sarif format report. default is github.repository/bd_scan | no | ${{github.repository}}/bd_scan |
| blackduck_toolname_for_sarif_full | Given name is used for sarif tool name for Black Duck full scan results. Default is Synopsys Black Duck Intelligent | no | Synopsys Black Duck Intelligent |
| blackduck_toolname_for_sarif_rapid | Given name is used for sarif tool name for Black Duck rapid scan results. Default is Synopsys Black Duck Rapid | no | Synopsys Black Duck Rapid |
Outputs
no outputs