add sdl tasks

Azure · Aug 27, 2024 · fbb0da6 · fbb0da6
1 parent 4b7ae06
commit fbb0da6
Showing 1 changed file with 26 additions and 1 deletion.
diff --git a/vsts/node-nightly-windows.yaml b/vsts/node-nightly-windows.yaml
@@ -34,7 +34,32 @@ extends:
         pool:
           vmImage: 'windows-latest'
         steps:
-        - template: common/sdl_steps.yaml
+        - task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@3
+          displayName: "Credential Scan"
+          inputs:
+            outputFormat: 'pre'
+            scanFolder: $(Build.SourcesDirectory)
+        - task: securedevelopmentteam.vss-secure-development-tools.build-task-policheck.PoliCheck@2
+          displayName: 'Run PoliCheck'
+          inputs:
+            targetType: F
+        - task: PostAnalysis@2
+          displayName: "SDL Analysis"
+          inputs:
+            AllTools: false
+            APIScan: false
+            BinSkim: false
+            CodesignValidation: false
+            CredScan: true
+            FortifySCA: false
+            FxCop: false
+            ModernCop: false
+            PoliCheck: true
+            RoslynAnalyzers: false
+            SDLNativeRules: false
+            Semmle: false
+            TSLint: false
+            ToolLogsNotFoundAction: 'Standard'
 
     - stage: Test
       dependsOn: ['SDL']