Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DETECT_RISK_REPORT_PDF: true does not create thre risk report in the ouput artifacts #32

Open
padaszewski opened this issue Aug 9, 2022 · 1 comment

Comments

@padaszewski
Copy link

Hi,
I am trying to generate the risk report in the output artifacts. So far I've seen that DETECT_RISK_REPORT_PDF: true does nothing when scan-mode: RAPID. Therefore I switched to scan-mode: INTELLIGENT and I saw in the logs, that the risk report pdf was created, but is not attached to the output artifacts.
Here is my configuration

      - name: Run Synopsys Detect
        uses: synopsys-sig/[email protected]
        env:
          NODE_TLS_REJECT_UNAUTHORIZED: 0
          DETECT_DETECTOR_SEARCH_DEPTH: 4
          DETECT_RISK_REPORT_PDF: true
#         DETECT_RISK_REPORT_PDF_PATH: /home/runner/work/_temp/blackduck/runs
#         DETECT_NOTICES_REPORT: true
          DETECT_DIAGNOSTIC: true #tested also EXTENDED
        with:
          scan-mode: INTELLIGENT
          github-token: ${{ secrets.GITHUB_TOKEN }}
          detect-version: 7.14.0
          blackduck-url: ${{ secrets.BLACKDUCK_URL }}
          blackduck-api-token: ${{ secrets.BLACKDUCK_API_TOKEN }}

I would expect to find this here:
image

But this is not the case.
I've tried with different paths for the risk report, but without success.
Could You provide me any hints on how I could achive my goal?

Greets

@uluzox
Copy link

uluzox commented Nov 23, 2022

Try adding an upload artifact step

- name: Archive Blackduck Scan Report
   if: ${{ always() }}
   uses: actions/upload-artifact@v2
   with:
     name: BlackDuck-Report
     path: '*RiskReport.pdf'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants