switch to new blackduck action

nutanix-cloud-native · Feb 7, 2024 · cccb64d · cccb64d
1 parent e03c9ca
commit cccb64d
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 8 deletions.
diff --git a/.github/workflows/synopsys-schedule.yaml b/.github/workflows/synopsys-schedule.yaml
@@ -1,4 +1,4 @@
-name: Black Duck Intelligent Policy Check
+name: Black Duck Daily Policy Check
 on:
   schedule:
     - cron: "0 0 * * *"
@@ -25,7 +25,7 @@ jobs:
         run: make build
 
       - name: Black Duck Full Scan
-        uses: synopsys-sig/synopsys-action@v1.5.0
+        uses: synopsys-sig/synopsys-action@v1.7.0
         with:
           blackduck_url: ${{ secrets.BLACKDUCK_URL }}
           blackduck_apiToken: ${{ secrets.BLACKDUCK_API_TOKEN }}

diff --git a/.github/workflows/synopsys.yaml b/.github/workflows/synopsys.yaml
@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version: "^1.19"
 
@@ -28,20 +28,22 @@ jobs:
 
       - name: Black Duck Full Scan
         if: ${{ github.event_name != 'pull_request' }}
-        uses: synopsys-sig/synopsys-action@v1.5.0
+        uses: synopsys-sig/synopsys-action@v1.7.0
         with:
           blackduck_url: ${{ secrets.BLACKDUCK_URL }}
-          blackduck_apiToken: ${{ secrets.BLACKDUCK_API_TOKEN }}
+          blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           blackduck_scan_full: true
           blackduck_scan_failure_severities: 'BLOCKER,CRITICAL'
 
       - name: Black Duck PR Scan
         if: ${{ github.event_name == 'pull_request' }}
-        uses: synopsys-sig/synopsys-action@v1.5.0
+        uses: synopsys-sig/synopsys-action@v1.7.0
+        env:
+          DETECT_PROJECT_VERSION_NAME: ${{ github.base_ref }}
         with:
           blackduck_url: ${{ secrets.BLACKDUCK_URL }}
-          blackduck_apiToken: ${{ secrets.BLACKDUCK_API_TOKEN }}
+          blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           blackduck_scan_full: false
-          blackduck_automation_prcomment: true
+          blackduck_prComment_enabled: true