ci: reduce configuration files

.github/scripts/getBlackduckArgs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+
+const [, , filterPackage, phase = "DEVELOPMENT"] = process.argv;
+const outputPackages = "code-editor,core,icons,lab,shared,styles,uno-preset,viz"
+  .split(",")
+  .filter((p) => p !== filterPackage)
+  .map((p) => `/workdir/packages/${p}`)
+  .join(",");
+
+const arguments = `
+--detect.npm.dependency.types.excluded=DEV
+--detect.excluded.detector.types=LERNA
+--detect.project.version.phase=${phase}
+--detect.detector.search.continue=true
+--detect.project.version.update=true
+--detect.detector.search.depth=1
+--detect.excluded.directories=${outputPackages}
+`;
+
+console.log(arguments.replace(/\n/g, " ").trim());

.github/workflows/security.yml

@@ -33,7 +33,9 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        PACKAGE: ["code-editor", "core", "icons", "lab", "shared", "styles", "uno-preset", "viz"]
+        PACKAGE: ["code-editor", "core", "icons"]
+
+    #, "lab", "shared", "styles", "uno-preset", "viz"]
 
     steps:
       - name: Checkout
@@ -66,7 +68,7 @@ jobs:
 
       - name: Load blackduck project properties
         shell: bash
-        run: echo "BLACKDUCK_ARGS=$(awk '{print}' ORS=' ' .github/security-configurations/blackduck-${{ matrix.PACKAGE }}.properties)" >> $GITHUB_ENV
+        run: echo "BLACKDUCK_ARGS=$(.github/scripts/getBlackduckArgs ${{ matrix.PACKAGE }})" >> $GITHUB_ENV
 
       - name: Blackduck Scan
         uses: lumada-common-services/[email protected]