[CI] issue: HPCINFRA-3964 add Blackduck step to release job

Signed-off-by: Noam Tsemah <[email protected]>

Author: ntsemah

.ci/blackduck_source.sh

@@ -5,28 +5,28 @@ cd "$topdir"
 
 # Check if the variables and pipeline attributes are set
 [[ -z "${WORKSPACE}" ]] && { echo "Error: WORKSPACE variable is not set"; exit 1; }
-[[ -z "$BLACKDUCK_API_TOKEN" ]] && { echo "Error: BLACKDUCK_API_TOKEN variable is not set"; exit 1; }
+[[ -z "${BLACKDUCK_API_TOKEN}" ]] && { echo "Error: BLACKDUCK_API_TOKEN variable is not set"; exit 1; }
 [[ ! -d "${WORKSPACE}/logs" ]] && mkdir -p "${WORKSPACE}/logs"
 
 # Create valid JSON for further authentication in BlackDuck server
 json=$(jq -n \
-  --arg token "$BLACKDUCK_API_TOKEN" \
+  --arg token "${BLACKDUCK_API_TOKEN}" \
   '{"blackduck.url": "https://blackduck.mellanox.com/", "blackduck.api.token": $token }')
 
 export SPRING_APPLICATION_JSON="$json"
 export PROJECT_NAME=libxlio
-export PROJECT_VERSION="$sha1"
+export PROJECT_VERSION="${sha1}"
 export PROJECT_SRC_PATH="$topdir"/
 
-echo "Running BlackDuck (SRC) on $name"
+echo "Running BlackDuck (SRC) on ${name}"
 
 echo "CONFIG:"
 echo "        NAME: ${PROJECT_NAME}"
 echo "     VERSION: ${PROJECT_VERSION}"
 echo "    SRC_PATH: ${PROJECT_SRC_PATH}"
 
 [[ -d /tmp/blackduck ]] && rm -rf /tmp/blackduck
-sudo -u swx-jenkins git clone -c core.sshCommand="ssh -i ~/.ssh/id_ed25519" -b master --single-branch --depth=1 ssh://git-nbu.nvidia.com:12023/DevOps/Tools/blackduck /tmp/blackduck
+git clone -c core.sshCommand="ssh -i ~/.ssh/id_ed25519" -b master --single-branch --depth=1 ssh://git-nbu.nvidia.com:12023/DevOps/Tools/blackduck /tmp/blackduck
 cd /tmp/blackduck
 
 # disable check errors

.ci/pipeline/release_jjb.yaml

@@ -39,6 +39,10 @@
             name: "do_antivirus"
             default: true
             description: "Run Antivirus."
+        - bool:
+            name: "do_blackduck"
+            default: true
+            description: "Run BlackDuck."
         - string:
             name: "notification_email"
             default: "{jjb_release_email}"
@@ -47,7 +51,7 @@
             name: "conf_file"
             default: ".ci/pipeline/release_matrix_job.yaml"
             description: "job config file. Do not change it"
-        - bool: 
+        - bool:
             name: "do_dr_build"
             default: false
             description: "Build DR weekly"

.ci/pipeline/release_matrix_job.yaml

@@ -17,6 +17,9 @@ kubernetes:
       nodeSelector: 'kubernetes.io/arch=amd64'
       jnlpImage: 'nbu-harbor.gtm.nvidia.com/toolbox/c3po-jnlp:latest'
 
+credentials:
+  - {credentialsId: 'blackduck_api_token', type: 'string', variable: 'BLACKDUCK_API_TOKEN'}
+
 env:
   MAIL_FROM: [email protected]
 
@@ -40,17 +43,32 @@ runs_on_dockers:
       runAsUser: '6213',
       runAsGroup: '101'
     }
+  - {
+     file: '.ci/dockerfiles/Dockerfile.rhel8.6',
+     arch: 'x86_64',
+     name: 'xlio_static.bduck',
+     uri: '$arch/$name',
+     tag: '20250418',
+     build_args: '--no-cache --target bduck',
+     category: 'tool',
+     runAsUser: '6213',
+     runAsGroup: '101'
+    }
 
 steps:
   - name: Build-dpcp
     parallel: false
+    containerSelector:
+      - "{name: 'rhel8.6'}"
     run: |
       git clone https://github.com/Mellanox/libdpcp.git libdpcp
       cd libdpcp
       ./autogen.sh && ./configure --prefix=/usr && sudo make install
 
   - name: Release
     parallel: false
+    containerSelector:
+      - "{name: 'rhel8.6'}"
     run: |
       if ${do_dr_build}; then
         git checkout tags/${release_tag}
@@ -64,6 +82,16 @@ steps:
       env WORKSPACE=$PWD .ci/antivirus.sh
     archiveArtifacts: 'logs/'
 
+  - name: Blackduck
+    enable: ${do_blackduck}
+    parallel: false
+    containerSelector:
+      - "{name: 'xlio_static.bduck', category:'tool'}"
+    run: |
+        .ci/blackduck_source.sh
+    archiveArtifacts: 'logs/'
+    credentialsId: 'blackduck_api_token'
+
 pipeline_start:
     shell: action
     module: groovy