From 6ddd226025841c98d2446b648d4dd916ce28f68e Mon Sep 17 00:00:00 2001
From: Matthias Franck <matthias.franck@softathome.com>
Date: Thu, 23 Oct 2025 15:23:03 +0200
Subject: [PATCH] ci: blackduck: update blackduck scan job trigger

Update pipeline rules to run only on:
- Protected branches with tags
- Scheduled pipelines
- Merge request events (manual trigger)

References: PCF-1794
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
---
 .gitlab/blackduck.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.gitlab/blackduck.yml b/.gitlab/blackduck.yml
index 8ce9075efb..dee25e26cc 100644
--- a/.gitlab/blackduck.yml
+++ b/.gitlab/blackduck.yml
@@ -4,7 +4,10 @@
   timeout: 4 hours
   needs: []
   rules:
-    - when: manual
+    - if: $CI_COMMIT_REF_PROTECTED && $CI_COMMIT_TAG
+    - if: $CI_PIPELINE_SOURCE == "schedule"
+    - if: "$CI_PIPELINE_SOURCE == 'merge_request_event'"
+      when: manual
   before_script:
     - touch .build_failed
     - export CI_BUILD_PROFILE="$(echo $CI_JOB_NAME | sed 's/blackduck scan \(.*\)/\1/')"