Blackduck scanning on Databricks Workflow

[fjrodriguez]

Does anyone know if its compatible scan in blackduck your json based files from Workflows? 

At least, when its come to the notebook its compatible as blackduck detects python based files but i am wondering why can workflow be scanned as well.

[koji_kawamura]

Hi @fjrodriguez ,

Have you found your answer already? I hope I understand your question correctly. I think Databricks Asset Bundles (or Terraform) can be a useful tool to be added here, if you haven't looked at it already.

• Yes, you can and should scan both Python and JSON files (e.g., Databricks Workflow configs) with BlackDuck to detect vulnerabilities and exposed secrets such as API tokens.

• Databricks Asset Bundles let you manage all related Python scripts and JSON configuration files together in a Git repository. This structure makes it easy to apply automated BlackDuck scans across your entire Databricks project using CI/CD pipelines, ensuring all assets are checked for security issues before deployment.

This approach helps you maintain security and compliance across your Databricks workflows. 

1. https://wdcnet.com.br/wp-content/uploads/2025/01/Black-Duck-Secrets-Scanning.pdf
2. https://www.blackduck.com/blog/finding-hard-coded-secrets-before-you-suffer-a-breach.html
3. https://community.databricks.com/t5/technical-blog/ci-cd-integration-with-databricks-workflows/ba-p/...
4. https://docs.databricks.com/aws/en/dev-tools/ci-cd/
5. https://documentation.blackduck.com/category/cicd_integrations