33 строки
942 B
YAML
33 строки
942 B
YAML
# This pipelines builds all projects in the repository outside of Dockerfiles so that the artifacts
|
|
# can be scanned by SDL steps. SDL steps do not scan artifacts that are built within Dockerfiles.
|
|
trigger:
|
|
branches:
|
|
include:
|
|
- main
|
|
- nightly
|
|
pr: none
|
|
|
|
parameters:
|
|
# Setting CG Dry Run will run detection and submit results, but only for non-production branches, preventing scan
|
|
# results from being officially registered.
|
|
- name: cgDryRun
|
|
type: boolean
|
|
default: false
|
|
displayName: CG Dry Run
|
|
|
|
variables:
|
|
- template: /eng/common/templates/variables/common.yml@self
|
|
- name: skipComponentGovernanceDetection
|
|
value: false
|
|
|
|
extends:
|
|
template: /eng/common/templates/1es-official.yml@self
|
|
parameters:
|
|
stages:
|
|
- stage: CgDetection
|
|
displayName: CG Detection
|
|
jobs:
|
|
- template: /eng/common/templates/jobs/cg-build-projects.yml@self
|
|
parameters:
|
|
cgDryRun: ${{ parameters.cgDryRun }}
|