dotnet-docker/eng/pipelines/cg-code.yml

33 строки
942 B
YAML

# This pipelines builds all projects in the repository outside of Dockerfiles so that the artifacts
# can be scanned by SDL steps. SDL steps do not scan artifacts that are built within Dockerfiles.
trigger:
branches:
include:
- main
- nightly
pr: none
parameters:
# Setting CG Dry Run will run detection and submit results, but only for non-production branches, preventing scan
# results from being officially registered.
- name: cgDryRun
type: boolean
default: false
displayName: CG Dry Run
variables:
- template: /eng/common/templates/variables/common.yml@self
- name: skipComponentGovernanceDetection
value: false
extends:
template: /eng/common/templates/1es-official.yml@self
parameters:
stages:
- stage: CgDetection
displayName: CG Detection
jobs:
- template: /eng/common/templates/jobs/cg-build-projects.yml@self
parameters:
cgDryRun: ${{ parameters.cgDryRun }}