Switch to using analyzeTargetGlob to specify the files to be scanned

This commit is contained in:
Marc Paine 2024-09-13 16:14:53 -07:00
Родитель 5f1443daa6
Коммит e1be55ff59
2 изменённых файлов: 3 добавлений и 6 удалений

Просмотреть файл

@ -5,6 +5,6 @@
"areaPath": "DevDiv\\NET Tools\\SDK",
"iterationPath": "DevDiv",
"notificationAliases": [ "dotnetdevexcli@microsoft.com" ],
"repositoryName":"cli-lab",
"repositoryName": "cli-lab",
"codebaseName": "cli-lab"
}

Просмотреть файл

@ -30,6 +30,8 @@ extends:
enabled: true
tsa:
enabled: true
binskim:
analyzeTargetGlob: $(Build.SourcesDirectory)/artifacts/bin/**.dll;$(Build.SourcesDirectory)/artifacts/bin/**.exe;
pool:
name: $(DncEngInternalBuildPool)
image: 1es-windows-2022
@ -51,11 +53,6 @@ extends:
timeoutInMinutes: 180 # increase timeout since BAR publishing might wait a long time
jobs:
- job: Windows
templateContext:
outputs:
- output: pipelineArtifact
targetPath: $(Build.SourcesDirectory)/artifacts/bin/dotnet-core-uninstall
artifactName: UninstallTool
pool:
# For public or PR jobs, use the hosted pool. For internal jobs use the internal pool.
# Will eventually change this to two BYOC pools.