Migrates CyberEO tasks to distribution pipeline

.vsts/darwin/ci.yml

@@ -5,7 +5,6 @@ steps:
       . "$(Agent.WorkFolder)/.venv/batchexplorer/bin/activate"
       npm run build-and-pack
     displayName: Build and pack
-  - template: ../common/generate-sbom.yml
   - template: ../common/publish-artifacts.yml
     parameters:
       folder: darwin

.vsts/darwin/distribution.yml

@@ -28,6 +28,7 @@ steps:
     displayName: Build dmg
   - script: npm run package darwin-manifest
     displayName: Create manifest
+  - template: ../common/generate-sbom.yml
   - template: ../common/publish-artifacts.yml
     parameters:
       folder: darwin

.vsts/linux/ci.yml

@@ -31,8 +31,6 @@ steps:
   - script: npm run lint
     displayName: Lint
 
-  - template: ../common/generate-sbom.yml
-
   - template: ../common/publish-artifacts.yml
     parameters:
       folder: linux

.vsts/linux/distribution.yml

@@ -10,6 +10,7 @@ steps:
       . "$(Agent.WorkFolder)/.venv/batchexplorer/bin/activate"
       npm run package linux-manifest
     displayName: Create manifest
+  - template: ../common/generate-sbom.yml
   - template: ../common/publish-artifacts.yml
     parameters:
       folder: linux

.vsts/win/ci.yml

@@ -1,12 +1,5 @@
 steps:
-  # Static analysis before build
-  - task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@2
-    displayName: "Run CredScan"
-    inputs:
-      suppressionsFile: test/cred-scan-exclude.json
-      toolMajorVersion: V2
-      debugMode: false
-
+  - template: ./credscan.yml
   - template: ./win-dependencies.yml
 
   - powershell: npm run build-and-pack
@@ -20,20 +13,7 @@ steps:
       npm run spectron
     displayName: Running spectron
 
-  - task: securedevelopmentteam.vss-secure-development-tools.build-task-antimalware.AntiMalware@3
-    displayName: "AntiMalware Scanner"
-    inputs:
-      EnableServices: true
-
-  - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
-    displayName: "Publish Security Analysis Logs"
-
-  - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@1
-    displayName: "Post Analysis"
-    inputs:
-      CredScan: true
-
-  - template: ../common/generate-sbom.yml
+  - template: ./security-analysis.yml
 
   - template: ../common/publish-artifacts.yml
     parameters:

.vsts/win/credscan.yml

@@ -0,0 +1,9 @@
+steps:
+  # Static analysis before build
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@2
+    displayName: "Run CredScan"
+    inputs:
+      suppressionsFile: test/cred-scan-exclude.json
+      toolMajorVersion: V2
+      debugMode: false
+

.vsts/win/distribution.yml

@@ -1,4 +1,5 @@
 steps:
+  - template: ./credscan.yml
   - template: ./win-dependencies.yml
   - powershell: ./scripts/azpipelines/update-build-name.ps1
     displayName: Resolve version
@@ -10,6 +11,8 @@ steps:
       exec { npm run package win-exe }
     displayName: Build executable
 
+  - template: ./security-analysis.yml
+
   - template: ./sign.yml
     parameters:
       name: "Sign executable and dll"
@@ -27,6 +30,7 @@ steps:
         **/BatchExplorer*Setup*.exe
   - powershell: npm run package win-manifest
     displayName: Create manifest
+  - template: ../common/generate-sbom.yml
   - template: ../common/publish-artifacts.yml
     parameters:
       folder: windows

.vsts/win/security-analysis.yml

@@ -0,0 +1,13 @@
+steps:
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-antimalware.AntiMalware@3
+    displayName: "AntiMalware Scanner"
+    inputs:
+      EnableServices: true
+
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
+    displayName: "Publish Security Analysis Logs"
+
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@1
+    displayName: "Post Analysis"
+    inputs:
+      CredScan: true