Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added credscan steps for python #16136

Merged
merged 9 commits into from
Jan 20, 2021
Merged

Added credscan steps for python #16136

Show file tree
Hide file tree
Changes from 8 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
cd27470
Added credscan steps for python
sima-zhu Jan 13, 2021
35a334b
Update aggregate-reports.yml for Azure Pipelines
sima-zhu Jan 13, 2021
b409889
Added suppression files
sima-zhu Jan 13, 2021
48713e2
Merge branch 'credscan' of https://github.com/Azure/azure-sdk-for-pyt…
sima-zhu Jan 13, 2021
97a170f
generate the baseline file first
sima-zhu Jan 15, 2021
4694a32
Using baseline files
sima-zhu Jan 15, 2021
1d008f4
Added credscan steps for python
sima-zhu Jan 15, 2021
c54b1d6
Merge branch 'credscan' of https://github.com/Azure/azure-sdk-for-pyt…
sima-zhu Jan 15, 2021
faf6cf1
Added suppression files
sima-zhu Jan 20, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Empty file added eng/CredScanSuppression.json
View file
Open in desktop
Empty file.
17 changes: 17 additions & 0 deletions eng/pipelines/aggregate-reports.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,23 @@ jobs:
vmImage: 'windows-2019'

steps:
- task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@3
displayName: 'Run CredScan'
inputs:
debugMode: false
- task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@2
displayName: 'Post Analysis'
inputs:
GdnBreakAllTools: false
GdnBreakGdnToolCredScan: true
GdnBreakGdnToolCredScanSeverity: Error
GdnBreakBaselineFiles: $(Build.SourcesDirectory)\eng\python.gdnbaselines
GdnBreakBaselines: baseline
continueOnError: true
- task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@3
displayName: 'Publish Security Analysis Logs'
continueOnError: true
condition: succeededOrFailed()
- template: /eng/pipelines/templates/steps/analyze_dependency.yml

- task: AzureFileCopy@2
Expand Down
Loading