add black duck scan action

.github/workflows/blackduck_scan.yml

@@ -0,0 +1,47 @@
+name: Blackduck Scan
+on:
+  workflow_dispatch:
+    inputs:
+      project_version:
+        description: Black Duck compliance check for version
+        default:
+        required: true
+        type: string
+
+jobs:
+  oss-compliance:
+    name: OSS Compliance scan
+    runs-on: staging-2c-8gb
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          ref: ${{ inputs.project_version }}
+
+      - name: Setup Python v3.7
+        uses: actions/setup-python@v3
+        with:
+          python-version: '3.7'
+
+      - name: Setup JDK8
+        uses: actions/setup-java@v3
+        with:
+          distribution: temurin
+          java-version: 8
+
+      - name: Get project node version
+        run: echo ::set-output name=NODE_VERSION::$(cat .node-version)
+        id: node
+
+      - name: Install node
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ steps.node.outputs.NODE_VERSION }}
+
+      - name: Scan with Black Duck Tools
+        uses: tomtom-internal/blackduck-action@v0
+        env:
+          BLACKDUCK_API_TOKEN: ${{ secrets.BLACKDUCK_TOKEN }}
+        with:
+          name: react-native-sound
+          version: ${{ inputs.project_version }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}

.node-version

@@ -0,0 +1 @@
+16.13.2

bdtools.yml

@@ -0,0 +1,14 @@
+project: react-native-sound
+scan_type:
+  - FULL_SCAN
+include_folders:
+  - android
+  - RNSound
+  - scripts
+exclude_folders:
+  - windows
+detectors_included:
+  - NPM
+  - GIT
+passthrough:
+  - --detect.npm.dependency.types.excluded=DEV