Configure Mend Bolt for GitHub

.github/workflows/build-rootfs.yml

@@ -14,7 +14,7 @@ jobs:
         arch:
           - amd64
           - arm64
-          # - armhf # TODO Enable when supported
+          - armhf # TODO Enable when supported
     steps:
       - uses: actions/checkout@v4.2.2
         with:

.github/workflows/test.yml

@@ -11,6 +11,7 @@ on:  # yamllint disable-line rule:truthy
     workflows: ["build"]
     types:
       - completed
+
 jobs:
   test:
     env:
@@ -35,7 +36,8 @@ jobs:
         uses: robinraju/release-downloader@v1.12
         with:
           repository: 'Z-Wave-Alliance/z-wave-stack-binaries'
-          fileName: 'z-wave-stack-binaries-25.1.0-26-g29d304a-Linux.tar.gz'
+          tag: 'v25.1.0-28-g7e0b50f'
+          fileName: 'z-wave-stack-binaries-*-Linux.tar.gz'
           token: ${{ secrets.GH_ZWAVE_ACCESS_TOKEN }}
           latest: true
 
@@ -66,3 +68,17 @@ jobs:
           cd z-wave-stack-binaries/bin && file -E *_x86_REALTIME.elf && cd -
           export ZPC_ARGS="--log.level=d"
           ./scripts/tests/z-wave-stack-binaries-test.sh
+
+      - name: Set custom status
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.repos.createCommitStatus({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            sha: context.sha,
+            state: 'success',
+            context: 'My Custom Check',
+            description: 'All tests passed!',
+            target_url: 'https://example.com/results'
+            })

.whitesource

@@ -0,0 +1,14 @@
+{
+  "scanSettings": {
+    "baseBranches": []
+  },
+  "checkRunSettings": {
+    "vulnerableCheckRunConclusionLevel": "failure",
+    "displayMode": "diff",
+    "useMendCheckNames": true
+  },
+  "issueSettings": {
+    "minSeverityLevel": "LOW",
+    "issueType": "DEPENDENCY"
+  }
+}

helper.mk

@@ -244,15 +244,18 @@ test: ${build_dir}
 check: test
 
 zwa_project?=z-wave-stack-binaries
-zwa_rev?=25.1.0-26-g29d304a
-zwa_file?=${zwa_project}-${zwa_rev}-Linux.tar.gz
+zwa_ver?=25.1.0-28-g7e0b50f
+zwa_rev?=v${zwa_ver}
+zwa_file?=${zwa_project}-${zwa_ver}-Linux.tar.gz
 zwa_url?=https://github.com/Z-Wave-Alliance/${zwa_project}
 zwa_dir?=${zwa_project}
 
 ${CURDIR}/tmp/${zwa_file}:
 	@echo "TODO: https://github.com/Z-Wave-Alliance/z-wave-stack-binaries/issues/2"
 	mkdir -p ${@D} && cd ${@D} \
-		&& gh release download -R "${zwa_url}" --pattern "${zwa_file}"
+		&& gh release download \
+			--repo "${zwa_url}" --pattern "${zwa_file}" \
+			"${zwa_rev}"
 
 ${zwa_dir}: ${CURDIR}/tmp/${zwa_file}
 	mkdir -p "$@"