Skip to content

chore: update workflow to download and extract OCM CLI alongside CTF #59

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
morri-son merged 9 commits into from
Jul 25, 2025
Merged

chore: update workflow to download and extract OCM CLI alongside CTF #59

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
a076d86
chore: update workflow to download and extract OCM CLI alongside CTF
morrison-sap Apr 1, 2025
269116e
chore: install OCM CLI using setup action in manual upload workflow
morrison-sap Apr 1, 2025
f345acb
chore: update OCM CLI installation step to use specified version from…
morrison-sap Apr 1, 2025
93db406
chore: fix path quoting in BDBA upload workflow
morrison-sap Apr 1, 2025
faf8441
chore: add comments to BDBA workflow for clarity on token management …
morrison-sap Apr 2, 2025
42fd2e9
chore: enhance comments in BDBA token rotation workflow for clarity o…
morrison-sap Apr 2, 2025
8ba8ddb
chore: update curl command in BDBA upload workflow to use silent mode…
morrison-sap Apr 2, 2025
68765f5
revert changes and bring back inception for ocm cli
morrison-sap Jul 25, 2025
3dbc797
Merge branch 'main' into add-ocm-cli-download-to-workflow
jakobmoellerdev Jul 25, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/bdba.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,10 @@
# Workflow to upload CTFs to Black Duck Binary Analysis (BDBA) for scanning.
# Located in .github repo to be shared across all repositories in the GH org.
# This workflow is triggered by other workflows, e.g., release workflow.
# The secret for the BDBA_API_TOKEN is generated in another workflow
# (https://github.com/open-component-model/.github/actions/workflows/rotate-bdba-token.yml)
# which is scheduled to run every 30 days. By policy the maximum lifetime of a token is 180 days.

name: BDBA Scan

on:
Expand Down
5 changes: 4 additions & 1 deletion .github/workflows/rotate-bdba-token.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
# Rotate Black Duck Binary Analysis API token on a monthly basis
# Rotate Black Duck Binary Analysis API token on a monthly basis.
# Per SAP policy the maximum lifetime of a BDBA token is 180 days.
# The token is used in the worklfow bdba.yaml and stored as a secret on org level
# The secret is used in the BDBA workflows.

name: BDBA Token Rotation

permissions:
Expand Down