Skip to content

Refactor Black Duck security scan workflow and update action versions#82

Merged
tuxtof merged 1 commit intomainfrom
fix/blackduck2
Feb 5, 2026
Merged

Refactor Black Duck security scan workflow and update action versions#82
tuxtof merged 1 commit intomainfrom
fix/blackduck2

Conversation

@tuxtof
Copy link
Copy Markdown
Contributor

@tuxtof tuxtof commented Feb 5, 2026

This pull request simplifies and consolidates the Black Duck security scan workflows in the GitHub Actions configuration. The main changes involve removing a redundant scheduled workflow, updating the scan action to use a newer version, and streamlining the configuration for easier maintenance.

Workflow consolidation and simplification:

  • Removed the separate .github/workflows/synopsys-schedule.yaml file, eliminating the redundant scheduled Black Duck policy check workflow.
  • Added a scheduled trigger (cron: "0 0 * * *") directly to the existing .github/workflows/synopsys.yaml workflow, ensuring daily scans are still performed without a separate workflow file.

Action and configuration updates:

  • Replaced the deprecated synopsys-sig/synopsys-action@v1.13.1 with the newer blackduck-inc/black-duck-security-scan@v2.1.1 action, and updated all relevant configuration keys (e.g., from blackduck_url to blackducksca_url).
  • Simplified the workflow by removing the custom check_approvals job and related conditional logic, focusing the workflow solely on security scanning.

@tuxtof tuxtof requested a review from arbhojntnx February 5, 2026 18:46
@tuxtof tuxtof merged commit 426c86a into main Feb 5, 2026
4 checks passed
@tuxtof tuxtof deleted the fix/blackduck2 branch February 5, 2026 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants