PowerPlatformConnectors/.pipelines/security.yml

68 строки
1.5 KiB
YAML

pool:
vmImage: 'windows-latest'
steps:
- task: ComponentGovernanceComponentDetection@0
inputs:
scanType: 'Register'
verbosity: 'Verbose'
alertWarningLevel: 'High'
- task: SdtReport@1
inputs:
AllTools: false
APIScan: true
BinSkim: false
CodesignValidation: false
CredScan: true
FortifySCA: false
FxCop: false
ModernCop: false
MSRD: false
PoliCheck: true
PoliCheckBreakOn: 'Severity1'
RoslynAnalyzers: false
SDLNativeRules: false
Semmle: false
TSLint: true
TSLintBreakOn: 'Error'
ToolLogsNotFoundAction: 'Standard'
- task: TSAUpload@1
inputs:
tsaVersion: 'TsaV2'
codebase: 'Existing'
tsaEnvironment: 'PROD'
codeBaseName: $(tsacodebasename)
uploadAPIScan: true
uploadBinSkim: false
uploadCredScan: true
uploadFortifySCA: false
uploadFxCop: false
uploadModernCop: false
uploadPoliCheck: true
uploadPREfast: false
uploadRoslyn: false
uploadTSLint: true
uploadAsync: true
- task: PublishSecurityAnalysisLogs@3
inputs:
ArtifactName: 'CodeAnalysisLogs'
ArtifactType: 'Container'
- task: PostAnalysis@1
inputs:
AllTools: false
APIScan: true
BinSkim: false
CodesignValidation: false
CredScan: true
FortifySCA: false
FxCop: false
ModernCop: false
PoliCheck: true
PoliCheckBreakOn: 'Severity1'
RoslynAnalyzers: false
SDLNativeRules: false
Semmle: false
TSLint: true
TSLintBreakOn: 'Error'
ToolLogsNotFoundAction: 'Standard'