Cloudbees action: Scan with Blackduck SCA

Use this action to scan repositories for dependency vulnerabilities with the Blackduck Software Composition Analysis (SCA) scanner.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
server-url	String	Yes	The Blackduck server URL.
api-token	String	Yes	The Blackduck api token.
project-name	String	No	The Blackduck project name.
project-version	String	No	The Blackduck project version.

Usage example

In your YAML file, add:

      - name: Scan with Blackduck SCA
        uses: cloudbees-io/blackduck-sca-scan-dependency@v1
        with:
          server-url: 'https://blackduck.saas.com'
          api-token: 'YzUwN2Mz=='

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.