fix: pin npm as the only blackduck scan detector

Refinitiv · Aug 10, 2023 · f1e4bf0 · f1e4bf0
1 parent 2ea0045
commit f1e4bf0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/blackduck_scan.yml b/.github/workflows/blackduck_scan.yml
@@ -47,4 +47,4 @@ jobs:
           --blackduck.api.token="${{ secrets.BLACKDUCK_APP_TOKEN }}" \
           --blackduck.url="${{ vars.BLACKDUCK_URL }}" \
           --blackduck.trust.cert=true \
-          --detect.lerna.path="./node_modules/.bin/lerna" # make sure blackduck use lerna from npm package rather than shell one
+          --detect.accuracy.required="NPM" # lerna fails to detect dependencies and list them as BOM on blackduck