[CI] issue: HPCINFRA-3964 add Blackduck step to release job

Signed-off-by: Noam Tsemah <[email protected]>

Author: ntsemah

.ci/blackduck_source.sh

@@ -5,28 +5,28 @@ cd "$topdir"
 
 # Check if the variables and pipeline attributes are set
 [[ -z "${WORKSPACE}" ]] && { echo "Error: WORKSPACE variable is not set"; exit 1; }
-[[ -z "$BLACKDUCK_API_TOKEN" ]] && { echo "Error: BLACKDUCK_API_TOKEN variable is not set"; exit 1; }
+[[ -z "${BLACKDUCK_API_TOKEN}" ]] && { echo "Error: BLACKDUCK_API_TOKEN variable is not set"; exit 1; }
 [[ ! -d "${WORKSPACE}/logs" ]] && mkdir -p "${WORKSPACE}/logs"
 
 # Create valid JSON for further authentication in BlackDuck server
 json=$(jq -n \
-  --arg token "$BLACKDUCK_API_TOKEN" \
+  --arg token "${BLACKDUCK_API_TOKEN}" \
   '{"blackduck.url": "https://blackduck.mellanox.com/", "blackduck.api.token": $token }')
 
 export SPRING_APPLICATION_JSON="$json"
 export PROJECT_NAME=libxlio
-export PROJECT_VERSION="$sha1"
+export PROJECT_VERSION="${sha1}"
 export PROJECT_SRC_PATH="$topdir"/
 
-echo "Running BlackDuck (SRC) on $name"
+echo "Running BlackDuck (SRC) on ${name}"
 
 echo "CONFIG:"
 echo "        NAME: ${PROJECT_NAME}"
 echo "     VERSION: ${PROJECT_VERSION}"
 echo "    SRC_PATH: ${PROJECT_SRC_PATH}"
 
 [[ -d /tmp/blackduck ]] && rm -rf /tmp/blackduck
-sudo -u swx-jenkins git clone -c core.sshCommand="ssh -i ~/.ssh/id_ed25519" -b master --single-branch --depth=1 ssh://git-nbu.nvidia.com:12023/DevOps/Tools/blackduck /tmp/blackduck
+git clone -c core.sshCommand="ssh -i ~/.ssh/id_ed25519" -b master --single-branch --depth=1 ssh://git-nbu.nvidia.com:12023/DevOps/Tools/blackduck /tmp/blackduck
 cd /tmp/blackduck
 
 # disable check errors

.ci/pipeline/release_jjb.yaml

@@ -35,6 +35,10 @@
             name: "do_release"
             default: true
             description: "Release build packges into the release folder, set to false for debugging"
+        - bool:
+            name: "do_blackduck"
+            default: true
+            description: "Run BlackDuck."
         - string:
             name: "notification_email"
             default: "{jjb_release_email}"

.ci/pipeline/release_matrix_job.yaml

@@ -15,7 +15,10 @@ kubernetes:
   arch_table:
     x86_64:
       nodeSelector: 'kubernetes.io/arch=amd64'
-      jnlpImage: 'harbor.mellanox.com/toolbox/c3po-jnlp:latest'
+      jnlpImage: 'nbu-harbor.gtm.nvidia.com/toolbox/c3po-jnlp:latest'
+
+credentials:
+  - {credentialsId: 'blackduck_api_token', type: 'string', variable: 'BLACKDUCK_API_TOKEN'}
 
 env:
   MAIL_FROM: [email protected]
@@ -35,22 +38,46 @@ runs_on_dockers:
       arch: 'x86_64',
       tag: '20250304'
     }
-
+  - {
+     file: '.ci/dockerfiles/Dockerfile.rhel8.6',
+     arch: 'x86_64',
+     name: 'xlio_static.bduck',
+     uri: '$arch/$name',
+     tag: '20250418',
+     build_args: '--no-cache --target bduck',
+     category: 'tool',
+     runAsUser: '6213',
+     runAsGroup: '101'
+    }
 
 steps:
   - name: Build-dpcp
     parallel: false
+    containerSelector:
+      - "{name: 'rhel8.6'}"
     run: |
       git clone https://github.com/Mellanox/libdpcp.git libdpcp
       cd libdpcp
       ./autogen.sh && ./configure --prefix=/usr && sudo make install
 
   - name: Release
     parallel: false
+    containerSelector:
+      - "{name: 'rhel8.6'}"
     run: |
      .ci/do_release.sh
     archiveArtifacts: "**/build_pkg.log,**/packages/*.rpm"
 
+  - name: Blackduck
+    enable: ${do_blackduck}
+    parallel: false
+    containerSelector:
+      - "{name: 'xlio_static.bduck', category:'tool'}"
+    run: |
+        .ci/blackduck_source.sh
+    archiveArtifacts: 'logs/'
+    credentialsId: 'blackduck_api_token'
+
 pipeline_start:
     shell: action
     module: groovy