| blackduck-url | Black Duck instance URL | yes | — |
| blackduck-token | Black Duck API token | yes | — |
| output-directory | Path to the directory where the report will be saved | no | ./blackduck-report |
| project-name | Project name in Black Duck | no | ${{ github.repository }} |
| project-version | Project version in Black Duck | no | ${{ github.ref_name }} |
| report-format | Report format depending on report-type. The following values are supported:
- SPDX_22 report: JSON, YAML, RDF or TAGVALUE.
- SPDX_23 report: JSON, YAML, RDF or TAGVALUE.
- CYCLONE_DX_13 report: JSON.
- CYCLONE_DX_14 report: JSON.
- LICENSE report: JSON or TEXT. | no | JSON |
| report-type | Report type. The following values are supported:
- SPDX_22. Generate a SBOM SPDX v2.2 report.
- SPDX_23. Generate a SBOM SPDX v2.3 report.
- CYCLONE_DX_13. Generate a SBOM CycloneDX v1.3 report.
- CYCLONE_DX_14. Generate a SBOM CycloneDX v1.4 report.
- LICENSE. Generate a license report. | no | SPDX_23 |
| sbom-report-template | Template name to be used for the SBOM report. This needs to match the name
of the template in Black Duck. If not provided, the default template will
be used. | no | — |