1+ # #
2+ # Runs scanning tools from security team.
3+ # See https://www.1eswiki.com/wiki/Secure_Development_Tools_Extension_For_Azure_DevOps
4+ # #
5+ steps :
6+ - task : ComponentGovernanceComponentDetection@0
7+ displayName : ' Components Detection'
8+ inputs :
9+ snapshotForceEnabled : true
10+ condition : and(succeededOrFailed(), variables.SDLScan)
11+
12+
13+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-antimalware.AntiMalware@3
14+ displayName : ' SDL: Anti-Malware scan of build sources and/or artifacts'
15+ continueOnError : true
16+ condition : and(succeededOrFailed(), variables.SDLScan)
17+
18+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-autoapplicability.AutoApplicability@1
19+ displayName : ' SDL: Run AutoApplicability'
20+ inputs :
21+ ExternalRelease : true
22+ continueOnError : true
23+ condition : and(succeededOrFailed(), variables.SDLScan)
24+
25+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-binskim.BinSkim@3
26+ displayName : ' SDL: Analyze managed and unmanaged binaries (exe, dll) for security vulnerabilities (BinSkim)'
27+ inputs :
28+ InputType : Basic
29+ AnalyzeTarget : ' $(DllsToScan)'
30+ AnalyzeVerbose : true
31+ AnalyzeHashes : true
32+ continueOnError : true
33+ condition : and(succeededOrFailed(), variables.SDLScan)
34+
35+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-codemetrics.CodeMetrics@1
36+ displayName : ' SDL: Analyze complexity of managed C# code (CodeMetrics)'
37+ inputs :
38+ Files : ' $(DllsToScan)'
39+ continueOnError : true
40+ condition : and(succeededOrFailed(), variables.SDLScan)
41+
42+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@2
43+ displayName : ' SDL: Analyze source and build output text files for credentials (CredScan)'
44+ inputs :
45+ debugMode : false
46+ continueOnError : true
47+ condition : and(succeededOrFailed(), variables.SDLScan)
48+
49+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-fxcop.FxCop@2
50+ displayName : ' SDL: Analyze C# code (.NET framework only) for security vulnerabilities (FxCop)'
51+ inputs :
52+ inputType : Basic
53+ targets : ' $(DllsToScan)'
54+ continueOnError : true
55+ condition : and(succeededOrFailed(), variables.SDLScan)
56+
57+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-prefast.SDLNativeRules@2
58+ displayName : ' SDL: Run the PREfast SDL Native Rules for MSBuild'
59+ continueOnError : true
60+ condition : and(succeededOrFailed(), variables.SDLScan)
61+
62+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-vulnerabilityassessment.VulnerabilityAssessment@0
63+ displayName : ' SDL: Create Vulnerability Assessment'
64+ continueOnError : true
65+ condition : and(succeededOrFailed(), variables.SDLScan)
66+
67+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
68+ displayName : ' SDL: Publish Security Analysis Logs'
69+ continueOnError : true
70+ condition : and(succeededOrFailed(), variables.SDLScan)
71+
72+ - task : securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@1
73+ displayName : ' SDL: Post Analysis'
74+ inputs :
75+ BinSkim : true
76+ CredScan : true
77+ SDLNativeRules : true
78+ continueOnError : true
79+ condition : and(succeededOrFailed(), variables.SDLScan)
0 commit comments