Cloudbees action: Scan with Black Duck SCA

Use this action to scan repositories for dependency vulnerabilities with the Black Duck Software Composition Analysis (SCA) scanner.

All CloudBees action repositories are listed at CloudBees, Inc. on GitHub.

Inputs

Table 1. Input details
Input name	Data type	Required?	Description
`server-url`	String	Yes	The Black Duck server URL.
`api-token`	String	Yes	The Black Duck client secret.
`project-name`	String	No	The Black Duck project name.
`project-version`	String	No	The Black Duck project version.

Usage example

In your YAML file, add:

      - name: Scan with Black Duck SCA
        uses: cloudbees-io/blackduck-sca-scan-dependency@v1
        with:
          server-url: ${{ vars.BLACK_DUCK_URL }}
          api-token: ${{ secrets.BLACK_DUCK_TOKEN }}▼