synopsys-sig-community/Black Duck Scan
Black Duck Scanning NEW VERSION for GitHub CI/CD Workflows
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| debug | Debugging | no | 0 |
| url | Black Duck URL | yes | — |
| token | Black Duck API Token | yes | — |
| trustcert | Trust Black Duck server certificate | no | false |
| project | Project name in the Black Duck server | no | — |
| version | Project version name in the Black Duck server | no | — |
| mode | Scanning mode, intelligent or rapid | no | rapid |
| output | Directory in which to save the rapid scan output | no | blackduck-output |
| fix_pr | Generate a Fix PR for each insecure component | no | false |
| comment_on_pr | Comment on a pull request | no | false |
| sarif | Output file for SARIF | no | blackduck-sarif.json |
| incremental_results | Incremental analysis | no | false |
| upgrade_major | Recommend upgrade guidance to major, not just minor, versions | no | true |
| nocheck | Skip check of GH commit/PR for changed package manager config files | no | false |
| detect_opts | Passthrough options to Detect, comma delimited, exclude leading hyphens | no | — |
| tool_version | Version of external tool to use | yes | — |
| github_token | GitHub Token | yes | — |
Outputs
no outputs