Add github action for blackduck scan (#2)

Gleb Levitin <[email protected]>, Mercedes-Benz Tech Innovation GmbH

Gleb Levitin <[email protected]>, Mercedes-Benz Tech Innovation GmbH

.github/workflows/blackduck.yml

@@ -0,0 +1,31 @@
+name: Blackduck Scan
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  schedule:
+    - cron: "0 3 * * *"
+
+jobs:
+  blackduck-scan:
+    name: BlackDuck Scan
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: BlackDuck Scan
+        uses: synopsys-sig/[email protected]
+        env:
+          DETECT_PROJECT_NAME: ${{ github.repository }}
+          DETECT_PROJECT_VERSION_LICENSE: MIT License
+          DETECT_GO_MOD_DEPENDENCY_TYPES_EXCLUDED: UNUSED
+          DETECT_POLICY_CHECK_FAIL_ON_SEVERITIES: ALL
+        with:
+          blackduck_url: ${{ secrets.BLACKDUCK_URL }}
+          blackduck_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
+          blackduck_scan_full:  ${{ github.event_name != 'pull_request' }}

.github/workflows/build-and-test.yml → .github/workflows/build.yml

@@ -1,13 +1,16 @@
-name: Build and Test
+name: Build Application
 
 on:
   push:
-    branches: [ "main" ]
+    branches:
+      - main
   pull_request:
-    branches: [ "main" ]
+    branches:
+      - main
 
 jobs:
-  build-and-test:
+  build:
+    name: Build Application
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -16,7 +19,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: '^1.23'
+          go-version: 1.23
 
       - name: Cache Go modules
         uses: actions/cache@v4
@@ -28,7 +31,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
 
-      - name: Build
+      - name: Build Application
         run: go build -v ./...
 
       - name: Run Tests

README.md

@@ -1,14 +1,15 @@
 # Gitflow-CLI
 
-[![Build and Test](https://github.com/mercedes-benz/gitflow-cli/actions/workflows/build-and-test.yml/badge.svg)](https://github.com/mercedes-benz/gitflow-cli/actions/workflows/build-and-test.yml)
+[![build](https://github.com/mercedes-benz/gitflow-cli/actions/workflows/build.yml/badge.svg)](https://github.com/mercedes-benz/gitflow-cli/actions/workflows/build.yml)
+<!--[![blackduck](https://github.com/mercedes-benz/gitflow-cli/actions/workflows/blackduck.yml/badge.svg)](https://github.com/mercedes-benz/gitflow-cli/actions/workflows/blackduck.yml)-->
 
 Gitflow is a branching model that organizes feature development, releases, and hotfixes into dedicated branches, 
 providing a structured approach for managing complex software projects with routine release timelines.
 
 The **gitflow-cli** automates release workflow process, saving considerable time and reducing the risk of errors. 
 It keeps your Git graph clean and consistent, enhancing project stability through semantic versioning.
 
-<img src="assets/gitflow-cli-demo.png" alt="gitflow-cli-demo" width="700" />
+<img src=".github/assets/gitflow-cli-demo.png" alt="gitflow-cli-demo" width="700" />
 
 ## Installation
 
@@ -106,7 +107,7 @@ If you want to contribute to this project, please read the [contributing guide](
 To contribute to **gitflow-cli**, we suggest setting up the Git hook below to comply with our contribution guidelines.
 
    ```bash
-   cp hooks/prepare-commit-msg .git/hooks/
+   cp .githooks/prepare-commit-msg .git/hooks/
    chmod +x .git/hooks/prepare-commit-msg
    ```
 

go.mod

@@ -1,6 +1,6 @@
 module github.com/mercedes-benz/gitflow-cli
 
-go 1.22.5
+go 1.23.2
 
 require (
 	github.com/spf13/cobra v1.8.1