scanning

.github/workflows/blackduck_scaninng.yml

@@ -0,0 +1,30 @@
+name: Blackduck Scanning
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - v**
+
+jobs:
+  build:
+    runs-on: [ ubuntu-latest ]
+    steps:
+      - name: Checkout Source
+        uses: actions/checkout@v3
+      - name: Black Duck Scan
+        uses: synopsys-sig/[email protected]
+
+        ### Configure DETECT environment variables
+        env:
+          DETECT_PROJECT_NAME: oa_libiio
+          DETECT_PROJECT_VERSION_NAME: ${{ github.ref_name }}
+          DETECT_WAIT_FOR_RESULT: false
+          DETECT_BLACKDUCK_SIGNATURE_SCANNING_LICENSE_SEARCH: true
+          DETECT_BLACKDUCK_SIGNATURE_SCANNING_COPYRIGHT_SEARCH: true
+          DETECT_EXCLUDED_DETECTOR_TYPES: GIT
+        with:
+          ### SCANNING: Required fields
+          blackduck_url: ${{ vars.BLACKDUCK_URL }}
+          blackduck_token: ${{ secrets.BLACKDUCK_TOKEN }}