cloudbees-io-gha/Black Duck scan and publish to Platform
Runs Black Duck SCA scan to detect vulnerabilities, risks, and policy violations, and publishes to the CloudBees platform.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| server-url | The URL of the Black Duck server | yes | — |
| api-token | The API token for Black Duck | yes | — |
| cloudbees-url | Cloudbees API URL | no | https://api.cloudbees.io |
| project-name | The name of the project to scan | no | "" |
| project-version | The version of the project to scan | no | "" |
| detect-cli-params | Additional parameters for the Detect CLI | no | "" |
| ref | Flag to indicate the ref that should be archived (same as supplied to checkout) | no | "" |
| workspace-dir | Flag to mention the path where the checked out code will be present | no | "" |
| scan-mode | Flag to mention the scan mode | no | INTELLIGENT |
| step-id | The ID of the step in the workflow | no | "" |
Outputs
| name | description |
|---|---|
| critical-count | A string containing the number of Critical security findings discovered during the scan. |
| very-high-count | A string containing the number of Very High security findings discovered during the scan. |
| high-count | A string containing the number of High security findings discovered during the scan. |
| medium-count | A string containing the number of Medium security findings discovered during the scan. |
| low-count | A string containing the number of Low security findings discovered during the scan. |