From e1d07fa8f073f4b0213af1024916508522fc3cbf Mon Sep 17 00:00:00 2001 From: Matthias Franck Date: Tue, 3 Jun 2025 18:11:23 +0200 Subject: [PATCH] ci: blackduck: integrate blackduck set up build environment to integrate blackduck scan job. Closes: PCF-2036 References: PCF-1794 Signed-off-by: Matthias Franck --- .gitlab/build.yml | 6 ++++++ .gitlab/docker/builder/Dockerfile | 1 + 2 files changed, 7 insertions(+) diff --git a/.gitlab/build.yml b/.gitlab/build.yml index bd7631e6b7..0a6d43affa 100644 --- a/.gitlab/build.yml +++ b/.gitlab/build.yml @@ -136,6 +136,12 @@ fi - section_end "export-rootfs" - rm .build_failed + - sbom=$(find bin/targets* -name prplos-*.bom.cdx.json) + - target_name=$(echo "$sbom" | sed -n 's/.*prplos-\(.*\)\.bom\.cdx\.json$/\1/p') + - sudo apt update + - sudo apt install openjdk-17-jdk -y + - cd build_dir/target-* + - bash <(curl -s -L https://detect.blackduck.com/detect10.sh) --blackduck.url=https://prplfoundation.app.blackduck.com --blackduck.api.token=$BLACKDUCK_API_KEY --detect.project.name=$CI_COMMIT_REF_NAME --detect.project.version.name=$target_name after_script: - > diff --git a/.gitlab/docker/builder/Dockerfile b/.gitlab/docker/builder/Dockerfile index 6cb80b8dc2..4f674cefa7 100644 --- a/.gitlab/docker/builder/Dockerfile +++ b/.gitlab/docker/builder/Dockerfile @@ -18,6 +18,7 @@ RUN \ libncurses5-dev \ locales \ nmap \ + openjdk-17-jdk \ openssh-client \ pwgen \ python3 \