diff --git a/.github/workflows/blackduck_scan.yml b/.github/workflows/blackduck_scan.yml new file mode 100644 index 00000000..c94ef581 --- /dev/null +++ b/.github/workflows/blackduck_scan.yml @@ -0,0 +1,47 @@ +name: Blackduck Scan +on: + workflow_dispatch: + inputs: + project_version: + description: Black Duck compliance check for version + default: + required: true + type: string + +jobs: + oss-compliance: + name: OSS Compliance scan + runs-on: staging-2c-8gb + steps: + - uses: actions/checkout@v3 + with: + ref: ${{ inputs.project_version }} + + - name: Setup Python v3.7 + uses: actions/setup-python@v3 + with: + python-version: '3.7' + + - name: Setup JDK8 + uses: actions/setup-java@v3 + with: + distribution: temurin + java-version: 8 + + - name: Get project node version + run: echo ::set-output name=NODE_VERSION::$(cat .node-version) + id: node + + - name: Install node + uses: actions/setup-node@v3 + with: + node-version: ${{ steps.node.outputs.NODE_VERSION }} + + - name: Scan with Black Duck Tools + uses: tomtom-internal/blackduck-action@v0 + env: + BLACKDUCK_API_TOKEN: ${{ secrets.BLACKDUCK_TOKEN }} + with: + name: react-native-sound + version: ${{ inputs.project_version }} + github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.node-version b/.node-version new file mode 100644 index 00000000..23d9c36a --- /dev/null +++ b/.node-version @@ -0,0 +1 @@ +16.13.2 diff --git a/bdtools.yml b/bdtools.yml new file mode 100644 index 00000000..47205ef4 --- /dev/null +++ b/bdtools.yml @@ -0,0 +1,14 @@ +project: react-native-sound +scan_type: + - FULL_SCAN +include_folders: + - android + - RNSound + - scripts +exclude_folders: + - windows +detectors_included: + - NPM + - GIT +passthrough: + - --detect.npm.dependency.types.excluded=DEV