Skip to content

chore: Improve GH workflows - #8

Open
mlakov wants to merge 2 commits into
mainfrom
chore/gh-workflows
Open

chore: Improve GH workflows#8
mlakov wants to merge 2 commits into
mainfrom
chore/gh-workflows

Conversation

@mlakov

@mlakov mlakov commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Improve GitHub Workflow Configurations for Black Duck Scans

Chore

🔧 Standardized and improved the Black Duck scan configurations across all GitHub Actions workflows by reorganizing input parameters into a consistent order and adding missing fields.

Changes

  • .github/workflows/main.yml: Reordered Black Duck scan inputs and added excluded-dirs (**/*test*,**/target/site) and github_token parameters that were previously missing.
  • .github/workflows/pr.yml: Reordered Black Duck scan inputs and added excluded-dirs and maven-version parameters to align with the other workflows.
  • .github/workflows/release.yml: Reordered Black Duck scan inputs and added java-version, excluded-dirs, and ensured all required parameters (github_token, blackduck_token, maven-version) are consistently present.

The key improvements across all three workflows are:

  • Consistent parameter ordering (scan mode → java-version → modules → project → excluded-dirs → maven-version → tokens)

  • Added excluded-dirs: '**/*test*,**/target/site' to all workflows to skip test directories and build output

  • Ensured all required tokens and configuration values are present in each workflow

  • 🔄 Regenerate and Update Summary


📬 Subscribe to the Hyperspace PR Bot DL to get the latest announcements and pilot features!

PR Bot Information

Version: 1.29.2 | 📖 Documentation | 🚨 Create Incident | 💬 Feedback

  • File Content Strategy: Full file content
  • LLM: anthropic--claude-4.6-sonnet
  • Event Trigger: pull_request.opened
  • Summary Prompt: Default Prompt
  • Correlation ID: 7e305b30-8985-11f1-9e18-da9249efc11a
  • Output Template: Default Template

@hyperspace-pr-bot hyperspace-pr-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two issues were found in release.yml: the java-version is hardcoded instead of referencing the existing ${{ env.JAVA_VERSION }} env variable, and scan_mode is missing entirely — both of which were already present (correctly) in main.yml and/or pr.yml. Please address these to keep the release scan consistent and maintainable.

PR Bot Information

Version: 1.29.2 | 📖 Documentation | 🚨 Create Incident | 💬 Feedback

  • File Content Strategy: Full file content
  • LLM: anthropic--claude-4.6-sonnet
  • Event Trigger: pull_request.opened
  • Experiment Variant: control
  • Correlation ID: 7e305b30-8985-11f1-9e18-da9249efc11a

Comment thread .github/workflows/release.yml Outdated
Comment thread .github/workflows/release.yml Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant