[CI] issue: 4705805 Add Blackduck to release job

Signed-off-by: Noam Tsemah <[email protected]>

Author: ntsemah

.ci/pipeline/release_jjb.yaml

@@ -35,6 +35,10 @@
             name: "do_release"
             default: true
             description: "Release build packges into the release folder, set to false for debugging"
+        - bool:
+            name: "do_blackduck"
+            default: false 
+            description: "Run BlackDuck."
         - string:
             name: "notification_email"
             default: "{jjb_release_email}"

.ci/pipeline/release_matrix_job.yaml

@@ -16,6 +16,10 @@ kubernetes:
       nodeSelector: 'kubernetes.io/arch=amd64'
       jnlpImage: 'harbor.mellanox.com/toolbox/c3po-jnlp:latest'
 
+credentials:
+  - {credentialsId: 'swx-jenkins2-svc-gerrit-ssh-key', keyFileVariable: 'GERRIT_SSH_KEY', type: 'sshUserPrivateKey'}
+  - {credentialsId: 'blackduck_api_token', type: 'string', variable: 'BLACKDUCK_API_TOKEN'}
+
 env:
   MAIL_FROM: [email protected]
 
@@ -37,14 +41,31 @@ runs_on_dockers:
       arch: 'x86_64',
       tag: '20250128'
     }
-
+  - {name: 'blackduck', file: '.ci/dockerfiles/Dockerfile.rhel8.6', category: 'tool', arch: 'x86_64', tag: '20250630', uri: 'vma/$arch/$name/bduck', build_args: '--no-cache --target bduck'}
+  
 steps:
   - name: Release
     parallel: false
+    containerSelector:
+      - "{name: 'rhel8.6', variant:1}"
     run: |
       .ci/do_release.sh
     archiveArtifacts: pkg/build_pkg.log,pkg/packages/*.rpm
 
+  - name: Blackduck
+    enable: ${do_blackduck}
+    containerSelector:
+      - "{name: 'blackduck', category:'tool', variant:1}"
+    run: |
+      # WA for possible CI-Demo bug: HPCINFRA-1614
+      if ${do_blackduck} ; then
+        .ci/blackduck_source.sh
+      fi
+    archiveArtifacts: 'logs/'
+    credentialsId: 
+      - "swx-jenkins2-svc-gerrit-ssh-key"
+      - "blackduck_api_token"
+
 pipeline_start:
     shell: action
     module: groovy