Skip to content

Bump github.com/hashicorp/packer-plugin-sdk from 0.4.0 to 0.5.4 #841

Bump github.com/hashicorp/packer-plugin-sdk from 0.4.0 to 0.5.4

Bump github.com/hashicorp/packer-plugin-sdk from 0.4.0 to 0.5.4 #841

Workflow file for this run

name: Black Duck Policy Check
on:
pull_request_target:
branches:
- main
push:
branches:
- main
jobs:
security:
if: github.repository == 'nutanix-cloud-native/packer-plugin-nutanix'
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
checks: write
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version: "^1.19"
- name: Build Project
run: make build
- name: Black Duck Full Scan
if: ${{ github.event_name != 'pull_request' }}
uses: synopsys-sig/synopsys-action@v1.9.0
with:
blackduck_url: ${{ secrets.BLACKDUCK_URL }}
blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
github_token: ${{ secrets.GITHUB_TOKEN }}
blackduck_scan_full: true
blackduck_scan_failure_severities: 'BLOCKER,CRITICAL'
- name: Black Duck PR Scan
if: ${{ github.event_name == 'pull_request' }}
uses: synopsys-sig/synopsys-action@v1.9.0
env:
DETECT_PROJECT_VERSION_NAME: ${{ github.base_ref }}
with:
blackduck_url: ${{ secrets.BLACKDUCK_URL }}
blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
github_token: ${{ secrets.GITHUB_TOKEN }}
blackduck_scan_full: false
blackduck_prComment_enabled: true