ci: blackduck: run blackduck scan on every directory.

Adding a loop to let blackduck scan every directory.
use curl command to download detect.sh script from detect.blackduck.com

Closes: PCF-2036
References: PCF-1794

Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
This commit is contained in:
Matthias Franck 2025-09-05 09:59:37 +02:00 committed by Mouna ALOUI
parent b2a8ff9bb0
commit 434d8ee305

View File

@ -12,6 +12,9 @@
- target_name=$(sed -n 's/.*CONFIG_TARGET_BOARD="\([^"]\+\)".*/\1/p' .config)
- sudo apt update
- sudo apt install openjdk-17-jdk -y
- cd build_dir/target-*
- rm -rf linux-*
- bash <(curl -s -L https://detect.blackduck.com/detect10.sh) --blackduck.url=https://prplfoundation.app.blackduck.com --blackduck.api.token=$BLACKDUCK_API_KEY --detect.project.name=$CI_COMMIT_REF_NAME --detect.project.version.name=$target_name
- curl -s --output detect.sh https://detect.blackduck.com/detect10.sh
- sudo chmod +x detect.sh
- |
for dir in $(ls build_dir/target-*); do
./detect.sh --blackduck.url=https://prplfoundation.app.blackduck.com --blackduck.api.token=$BLACKDUCK_API_KEY --detect.project.name=$CI_COMMIT_REF_NAME --detect.project.version.name=$target_name
done