diff --git a/.github/workflows/trigger-blackduck-scan.yaml b/.github/workflows/trigger-blackduck-scan.yaml index cded95bb..a6b52d07 100644 --- a/.github/workflows/trigger-blackduck-scan.yaml +++ b/.github/workflows/trigger-blackduck-scan.yaml @@ -15,12 +15,10 @@ on: jobs: trigger-scan: - uses: open-component-model/.github/.github/workflows/blackduck-scan.yaml@5ae45327f84644e21228845d8b4b682e9c7297ab + uses: open-component-model/.github/.github/workflows/blackduck-scan.yaml@47e68e42a6d78125d519e6e008c2b203385a0a72 with: # required to be able to differentiate between PRs and pushes in the called workflow (rapid or full scan) event_type: ${{ github.event_name }} - secrets: - BLACKDUCK_API_TOKEN: ${{ secrets.BLACKDUCK_API_TOKEN }} - BLACKDUCK_URL: ${{ secrets.BLACKDUCK_URL }} + secrets: inherit permissions: contents: read \ No newline at end of file