ci: blackduck: integrate blackduck

set up build environment to integrate blackduck scan job.

Closes: PCF-2036
References: PCF-1794

Signed-off-by: Matthias Franck <matthias.franck@softathome.com>

.gitlab/build.yml

@@ -136,6 +136,12 @@
       fi
     - section_end "export-rootfs"
     - rm .build_failed
+    - sbom=$(find bin/targets* -name prplos-*.bom.cdx.json)
+    - target_name=$(echo "$sbom" | sed -n 's/.*prplos-\(.*\)\.bom\.cdx\.json$/\1/p')
+    - sudo apt update
+    - sudo apt install openjdk-17-jdk -y
+    - cd build_dir/target-*
+    - bash <(curl -s -L https://detect.blackduck.com/detect10.sh) --blackduck.url=https://prplfoundation.app.blackduck.com --blackduck.api.token=$BLACKDUCK_API_KEY --detect.project.name=$CI_COMMIT_REF_NAME --detect.project.version.name=$target_name
 
   after_script:
     - >

.gitlab/docker/builder/Dockerfile

@@ -18,6 +18,7 @@ RUN \
 	libncurses5-dev \
 	locales \
 	nmap \
+	openjdk-17-jdk \
 	openssh-client \
 	pwgen \
 	python3 \