{"id":2139,"date":"2021-10-26T11:30:10","date_gmt":"2021-10-26T15:30:10","guid":{"rendered":"https:\/\/shirishranjit.com\/blog1\/?page_id=2139"},"modified":"2022-08-17T12:10:07","modified_gmt":"2022-08-17T16:10:07","slug":"mlsecops-blackduck-scanning","status":"publish","type":"page","link":"https:\/\/shirishranjit.com\/blog1\/mlops\/mlsecops-blackduck-scanning","title":{"rendered":"MLSecOps &#8211; BlackDuck Scanning"},"content":{"rendered":"\n<p>BlackDuck scanning is simple if you get it to working; however, getting to work with BlackDuck is a big challenge.<\/p>\n\n\n\n<p>For condo scanning, the source directory is where you have installed your conda and you need to have <strong>environment.yml<\/strong> file for it to detect conda detector.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>References:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>CVE org site: <a href=\"https:\/\/www.cve.org\">https:\/\/www.cve.org<\/a><\/li><li>CVSS calculator : <a href=\"https:\/\/nvd.nist.gov\/vuln-metrics\/cvss\">https:\/\/nvd.nist.gov\/vuln-metrics\/cvss<\/a><\/li><li>Conda Scanning Environment Setup:<a href=\"https:\/\/community.synopsys.com\/s\/article\/Scanning-Conda-environments-results-in-no-packages-being-found\">https:\/\/community.synopsys.com\/s\/article\/Scanning-Conda-environments-results-in-no-packages-being-found<\/a><\/li><li>Detect Air Gap Mode <a href=\"https:\/\/synopsys.atlassian.net\/wiki\/spaces\/IA\/pages\/1562443911\/Air+Gap+Mode+6.9.0\">https:\/\/synopsys.atlassian.net\/wiki\/spaces\/IA\/pages\/1562443911\/Air+Gap+Mode+6.9.0<\/a><\/li><li>Air Gap Mode document: <a href=\"https:\/\/community.synopsys.com\/s\/document-item?bundleId=integrations-detect&amp;topicId=downloadingandrunning%2Fairgap.html&amp;_LANG=enus\">https:\/\/community.synopsys.com\/s\/document-item?bundleId=integrations-detect&amp;topicId=downloadingandrunning%2Fairgap.html&amp;_LANG=enus<\/a><\/li><li>Air Gap Advance Mode &#8211; <a href=\"https:\/\/blackducksoftware.github.io\/synopsys-detect\/6.2.0\/advanced\/air-gap\/\">https:\/\/blackducksoftware.github.io\/synopsys-detect\/6.2.0\/advanced\/air-gap\/<\/a><\/li><li>Github Synopsys detect: <a href=\"https:\/\/github.com\/blackducksoftware\/synopsys-detect\">https:\/\/github.com\/blackducksoftware\/synopsys-detect<\/a><\/li><li>Github Synopsys Hub REST API for python:<a href=\"https:\/\/github.com\/blackducksoftware\/hub-rest-api-python\">https:\/\/github.com\/blackducksoftware\/hub-rest-api-python<\/a><\/li><li>Jenkins Plugin for Blackduck: <a href=\"https:\/\/synopsys.atlassian.net\/wiki\/spaces\/INTDOCS\/pages\/622779\/CI+CD+Jenkins\">https:\/\/synopsys.atlassian.net\/wiki\/spaces\/INTDOCS\/pages\/622779\/CI+CD+Jenkins<\/a><\/li><li>Blackduck hub setup &#8211; <a href=\"https:\/\/blackducksoftware.github.io\/blackduck-docker-inspector\/latest\/overview\/\">https:\/\/blackducksoftware.github.io\/blackduck-docker-inspector\/latest\/overview\/<\/a><\/li><li>Blackduck Software Github &#8211; <a href=\"https:\/\/github.com\/blackducksoftware\">https:\/\/github.com\/blackducksoftware<\/a><\/li><li><\/li><\/ul>\n<div class=\"twttr_buttons\"><div class=\"twttr_twitter\">\n\t\t\t\t\t<a href=\"http:\/\/twitter.com\/share?text=MLSecOps+-+BlackDuck+Scanning\" class=\"twitter-share-button\" data-via=\"\" data-hashtags=\"\"  data-size=\"default\" data-url=\"https:\/\/shirishranjit.com\/blog1\/mlops\/mlsecops-blackduck-scanning\"  data-related=\"\" target=\"_blank\">Tweet<\/a>\n\t\t\t\t<\/div><div class=\"twttr_followme\">\n\t\t\t\t\t\t<a href=\"https:\/\/twitter.com\/shiranjit\" class=\"twitter-follow-button\" data-size=\"default\"  data-show-screen-name=\"false\"  target=\"_blank\">Follow me<\/a>\n\t\t\t\t\t<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>BlackDuck scanning is simple if you get it to working; however, getting to work with BlackDuck is a big challenge. For condo scanning, the source directory is where you have installed your conda and you need to have environment.yml file &hellip; <a href=\"https:\/\/shirishranjit.com\/blog1\/mlops\/mlsecops-blackduck-scanning\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"parent":2136,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2139","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/pages\/2139"}],"collection":[{"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/comments?post=2139"}],"version-history":[{"count":12,"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/pages\/2139\/revisions"}],"predecessor-version":[{"id":2295,"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/pages\/2139\/revisions\/2295"}],"up":[{"embeddable":true,"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/pages\/2136"}],"wp:attachment":[{"href":"https:\/\/shirishranjit.com\/blog1\/wp-json\/wp\/v2\/media?parent=2139"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}