pombredanne/Black Duck GH Scan Action Directguidance
Black Duck Scanning NEW VERSION for GitHub CI/CD Workflows
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Apr 19, 2022
- License
- Apache 2.0
Pinned Snippet
uses: pombredanne/blackduck-scan-directguidance@40abcd809d2b6e1f8ee78fdcfb87ec3de3657e80 # v5tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| debug | Debugging | no | 0 |
| bd_url | Black Duck URL | yes | — |
| bd_token | Black Duck API Token | yes | — |
| bd_trustcert | Trust Black Duck server certificate | no | — |
| project | Project name in the Black Duck server | no | — |
| version | Project version name in the Black Duck server | no | — |
| mode | Scanning mode, intelligent or rapid | no | rapid |
| file | Location of the related file in the repository | no | — |
| output_folder | Directory in which to save the rapid scan output | no | blackduck-output |
| fix_pr | Generate a Fix PR for each insecure component | no | false |
| comment_on_pr | Comment on a pull request | no | false |
| sarif | Output file for SARIF | no | — |
| incremental_results | Incremental analysis | no | — |
| upgrade_major | Recommend upgrade guidance to major, not just minor, versions | no | — |
| no_files_check | Skip check of GH commit/PR for changed package manager config files | no | — |
| detect_opts | Passthrough options to Detect, comma delimited, exclude leading hyphens | no | — |
Outputs
no outputs