2020-07-01 21:33:36 +03:00
|
|
|
---
|
|
|
|
####################################################
|
|
|
|
# ModuleBuilder Configuration #
|
|
|
|
####################################################
|
|
|
|
|
|
|
|
CopyDirectories:
|
|
|
|
- DSCResources
|
|
|
|
- Module
|
|
|
|
- StigData
|
|
|
|
Encoding: UTF8 # With BOM in WinPS, noBOM in PSCore.
|
|
|
|
VersionedOutputDirectory: true
|
|
|
|
|
|
|
|
####################################################
|
|
|
|
# Sampler Pipeline Configuration #
|
|
|
|
####################################################
|
|
|
|
|
|
|
|
# Defining 'Workflows' (suite of InvokeBuild tasks) to be run using their alias
|
|
|
|
BuildWorkflow:
|
|
|
|
'.': # "." is the default Invoke-Build workflow. It is called when no -Tasks is specified to the build.ps1
|
|
|
|
- build
|
|
|
|
- test
|
|
|
|
|
|
|
|
build:
|
|
|
|
- Clean
|
|
|
|
- Build_Module_ModuleBuilder
|
|
|
|
- Build_NestedModules_ModuleBuilder
|
|
|
|
- Create_changelog_release_output
|
|
|
|
|
|
|
|
pack:
|
|
|
|
- build
|
|
|
|
- package_module_nupkg
|
|
|
|
|
|
|
|
hqrmtest:
|
|
|
|
- DscResource_Tests_Stop_On_Fail
|
|
|
|
|
|
|
|
test:
|
|
|
|
- Pester_Tests_Stop_On_Fail
|
|
|
|
- Pester_if_Code_Coverage_Under_Threshold
|
|
|
|
|
|
|
|
publish:
|
|
|
|
- Publish_release_to_GitHub
|
|
|
|
- publish_module_to_gallery # runs if nuget is not available
|
|
|
|
|
|
|
|
####################################################
|
|
|
|
# PESTER Configuration #
|
|
|
|
####################################################
|
|
|
|
|
|
|
|
Pester:
|
|
|
|
OutputFormat: NUnitXML
|
|
|
|
|
|
|
|
# Will look at every *.ps1 & *.psm1 under ModulePath, excepts when $_.FullName -match (Join-Path $ProjectPath $ExcludeFromCodeCoverageItem)
|
|
|
|
ExcludeFromCodeCoverage:
|
|
|
|
- DSCResources
|
|
|
|
Script:
|
|
|
|
- tests/Unit
|
|
|
|
ExcludeTag:
|
|
|
|
Tag:
|
2022-06-14 04:52:29 +03:00
|
|
|
CodeCoverageThreshold: 79 # Set to 0 to bypass
|
2020-07-01 21:33:36 +03:00
|
|
|
CodeCoverageOutputFile: JaCoCo_coverage.xml
|
|
|
|
CodeCoverageOutputFileEncoding: ascii
|
|
|
|
|
|
|
|
DscTest:
|
|
|
|
ExcludeTag:
|
|
|
|
- "Common Tests - New Error-Level Script Analyzer Rules"
|
|
|
|
- "Common Tests - Validate Localization"
|
4.6.0 PR to Dev for Release (#780)
* Update PowerSTIG with new SkipRuleCategory Parameter to skip entire STIG Category/Severity Level(s) (#740)
* Fixed Missing OrgSettings for V-88203 - Win10 Client 1.19 and 1.21 (#672)
* fixed V-88203 to be org setting with Tenant Guid
* updated changelog.md
* fixed registry rule issue in sql 2016 (#671)
* Release Process Update: Ensure the nuget package uses explicit DSC Resource Module Versions (#670)
* dialy commit
* updated build task to leverage nuget
* added new line for Common.Data.ps1
* warning message to troubleshoot ADO pipeline
* updated package tasks
* updated release.module.build
* updated module
* updated release
* updated release
* updated release
* hard coded nuget.exe path
* fixed FilePath parameter
* dynamically detect nuget.exe
* nuget dynamic detection
* testing alternate nuget detection
* updated release to leverage get-command for nuget
detection
* updated code to replace only the task needed
* updated build funct. conform to style guideline
* updated New-NuspecFile funciton
* Update PowerSTIG to successfully parse/apply Windows 2012 R2 MS Version 2, Rev 19 (#679)
* added support for 2012 R2 V2R19
* added new line to xml
* added Server 2019 V1R5,removed V1R2 (#684)
* Update PowerSTIG to successfully parse/apply Windows 10 STIG - V1R23 (#682)
* Added Windows Client V1R23, Removed Windows CLient V1R19
* Added Windows Client V1R23, Removed Windows CLient V1R19
* removed random tabs
* removed tabs from converted
* updated based on feedback
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* added support for 2016 V1R12 DC/MS (#685)
* Fixed: IIS Sever 10.0 STIG hardening rule V-100163 fails with error in Windows Server 2019 while using PowerSTIG 4.4.2 (#689)
* updated PowerSTIG to use AccessControlDsc 1.4.1
* updated composites with AccessControlDsc 1.4.1
* Update PowerSTIG to successfully parse/apply IIS 10.0 Site/Server V1R2 STIGs (#701)
* added support for IIS 10 Site/Server V1R2
* updated IISServer 10 V1R1 org settings file
* Revert "updated IISServer 10 V1R1 org settings file"
This reverts commit 54d4e827de8b7cbb588b615a9aeecc48d015c34e.
* added Firefox V4R29 STIG, remove V4R27 (#700)
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* Update PowerSTIG to successfully parse/apply SQL Server 2016 Instance V1R10 (#705)
* added SQL 2016 Instance V1R10, removed V1R8
* Updated changelog.md
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* added dns V1R15 (#697)
squash/merge
* Update PowerSTIG To Use xDnsServer version 1.16.0.0 (#703)
* Updated xDnsServer version
* update module version
* updated changelog.md
* upgrade xWebadministration to 3.2.0 (#714)
* added IE 11 STIG - V1R19 (#708)
* Removed Windows Server 2016 DC/MS V1R9 from processed STIGs folder (#710)
* removed old 2016 DC/MS processed STIGs
* updated changelog.md
* Update PowerSTIG to successfully parse/apply IIS Site/Server V1R11 STIGs (#706)
* added support for IIS site/server V1R11
* removed old processed STIGs
* updated AuditPolicyDsc to 1.4.0.0 (#716)
* Allow application of applicable user rights assignments for non-domain and disconnected systems (#719)
* updated based on community feedback
* update based on feedback
* update powerstig to use SecurityPolicyDsc 2.10.0.0 (#717)
* updated PowerSTIG to use ComputerMgmtDsc to 8.4.0 (#721)
* Added SkipRuleCategory support to PowerSTIG
* updating test to be compat with new feature
* updated test configs with dynamic logic
* updated test logic to run get-dscresource once
* updated to disallow skipping doc/man rules
* updated integration dscresource tests
* PR Feedback updates
Co-authored-by: Eric Jenkins <erjenkin@microsoft.com>
* Increase Code Coverage of PowerSTIG to %75 (#742)
* updated tests for increased code cov part 1
* fixed test
* update changelog.md
* update changelog
* tes
* reverted change
* added VsphereNTPsetting tests
* updated checklist test
* updated DomainName Function tests
* updated powerstig xml tests
* added tests for Convertto-PowerSTIGxml and Compare
* updated tests
* updated webconfig property rule test
* updated to convert all STIGS
* removed redundant tests
* update only select one of each STIG
* added all office stigs
* reverted some tests
* updated tests:
* removed dependency for helper files
* updated tests
* removed example folder
* update based on feedback
* updated test
* Increase Code Coverage of PowerSTIG (#745)
* Fixed Missing OrgSettings for V-88203 - Win10 Client 1.19 and 1.21 (#672)
* fixed V-88203 to be org setting with Tenant Guid
* updated changelog.md
* fixed registry rule issue in sql 2016 (#671)
* Release Process Update: Ensure the nuget package uses explicit DSC Resource Module Versions (#670)
* dialy commit
* updated build task to leverage nuget
* added new line for Common.Data.ps1
* warning message to troubleshoot ADO pipeline
* updated package tasks
* updated release.module.build
* updated module
* updated release
* updated release
* updated release
* hard coded nuget.exe path
* fixed FilePath parameter
* dynamically detect nuget.exe
* nuget dynamic detection
* testing alternate nuget detection
* updated release to leverage get-command for nuget
detection
* updated code to replace only the task needed
* updated build funct. conform to style guideline
* updated New-NuspecFile funciton
* Update PowerSTIG to successfully parse/apply Windows 2012 R2 MS Version 2, Rev 19 (#679)
* added support for 2012 R2 V2R19
* added new line to xml
* added Server 2019 V1R5,removed V1R2 (#684)
* Update PowerSTIG to successfully parse/apply Windows 10 STIG - V1R23 (#682)
* Added Windows Client V1R23, Removed Windows CLient V1R19
* Added Windows Client V1R23, Removed Windows CLient V1R19
* removed random tabs
* removed tabs from converted
* updated based on feedback
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* added support for 2016 V1R12 DC/MS (#685)
* Fixed: IIS Sever 10.0 STIG hardening rule V-100163 fails with error in Windows Server 2019 while using PowerSTIG 4.4.2 (#689)
* updated PowerSTIG to use AccessControlDsc 1.4.1
* updated composites with AccessControlDsc 1.4.1
* Update PowerSTIG to successfully parse/apply IIS 10.0 Site/Server V1R2 STIGs (#701)
* added support for IIS 10 Site/Server V1R2
* updated IISServer 10 V1R1 org settings file
* Revert "updated IISServer 10 V1R1 org settings file"
This reverts commit 54d4e827de8b7cbb588b615a9aeecc48d015c34e.
* added Firefox V4R29 STIG, remove V4R27 (#700)
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* Update PowerSTIG to successfully parse/apply SQL Server 2016 Instance V1R10 (#705)
* added SQL 2016 Instance V1R10, removed V1R8
* Updated changelog.md
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* added dns V1R15 (#697)
squash/merge
* Update PowerSTIG To Use xDnsServer version 1.16.0.0 (#703)
* Updated xDnsServer version
* update module version
* updated changelog.md
* upgrade xWebadministration to 3.2.0 (#714)
* added IE 11 STIG - V1R19 (#708)
* Removed Windows Server 2016 DC/MS V1R9 from processed STIGs folder (#710)
* removed old 2016 DC/MS processed STIGs
* updated changelog.md
* Update PowerSTIG to successfully parse/apply IIS Site/Server V1R11 STIGs (#706)
* added support for IIS site/server V1R11
* removed old processed STIGs
* updated AuditPolicyDsc to 1.4.0.0 (#716)
* Allow application of applicable user rights assignments for non-domain and disconnected systems (#719)
* updated based on community feedback
* update based on feedback
* update powerstig to use SecurityPolicyDsc 2.10.0.0 (#717)
* updated PowerSTIG to use ComputerMgmtDsc to 8.4.0 (#721)
* Added SkipRuleCategory support to PowerSTIG
* updating test to be compat with new feature
* updated test configs with dynamic logic
* updated test logic to run get-dscresource once
* updated to disallow skipping doc/man rules
* updated integration dscresource tests
* testing code coverage
* updated registryrule test to include more coverage
* updated sqlscriptqueryrule tests
* updated setScript in Get-ShutdownOnError function
* updated permissionrule tests with add. test case
* updated permRule test to increase code coverage
* updated changelog
* updated test and code coverage threshold
* updated code coverage threshold to 81
* updated CC threshold to 80
Co-authored-by: Eric Jenkins <erjenkin@microsoft.com>
* Update spacing in DoD logon script (#758)
* updated spacing in rule
* Updated changelog.md
* Functions.Checklist Manual Checks need to leverage psd1 files - Backward Compat Issue (#756)
* fixed issue 746
* update functions based on feedback
* updated function to work correctly with psd1
* updated changelog.md
* updated tests for issue 746
* added support for Outlook 2016 V2R1 (#768)
* Update PowerSTIG to successfully parse/apply Microsoft SQL Server 2016 Instance Version 2; Release 1 (#766)
* added support for 2016 instance 2.1
* removed tabs from xccdf and processed xml
* Update PowerSTIG to successfully parse/apply Microsoft Windows 2012 Server DNS STIG - Ver 2, Rel 1 (#763)
* updated Dns Server V2R1
* added new line to added DNS STIG
* Update PowerSTIG to successfully parse/apply Microsoft IIS 8.5 SITE/SERVER STIG - Ver 2, Rel 1 (#765)
* updated to add support for iis 8.5 v2r1
* updated org setting
* Update PowerSTIG to successfully parse/apply Microsoft IIS 10 SITE/SERVER STIG - Ver 2, Rel 1 (#764)
* updated to support IIS 10 site/server V2R1
* updated to support IIS 10 site/server V2R1
* update changelog
* updated rule split
* newline
* updated based on feedback
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* Update PowerSTIG to successfully parse/apply Microsoft Office System 2013 STIG - Ver 2, Rel 1 (#770)
* added xccdf, parser changes needed before convert
* add process xml after parser single quote removal
* updated replace statement based on feedback
* Update PowerSTIG to send a warning to the user when using a composite that leverages the new DISA Ids (#773)
* add disa warn msg to composites with new 2.1 stig
* updated changelog.md
* Provide Method to install DoD Root Certs for Server and Client OS (#775)
* initial commit
* updated changelog
* added unit test
* updated module import
* updated composite
* updated after testing
* updated tests
* updated coverted stig
* updated integration tests
* updated based on testing
* updated changelog to kick
* updated due to missing cert on 2019 stigs
* update to build.yaml
* updated based on comments
* updated based on test
* updated based on PR feedback
* Update PowerSTIG to Provide Rule Data from Processed xml (#777)
* create tooling function for rule query by end user
* update changelog.md
* update new functions to dsc guideline standards
* deving exception string tooling
* update function to address u009D in description
* added vulnId to non-detailed output
* merged local with 4.6.0
* updated functions, tests are outstanding
* updated tests.
* added tests for RuleQuery functions.
* update build.yaml to skip broke git changelog test
* mod build.yaml to correct exclusion for changelog
* updated test based on feedback
* Update Windows 10 Client STIGs based on ACAS results (#779)
* update for rule v-63381 acas scan
* update PowerSTIG to parse V-63685
* updated changelog
* updated build yaml for changelog
* merge conflict issue reprocessed stig
Co-authored-by: Brian Wilhite <bcwilhite@live.com>
* updated filehash and changelog
Co-authored-by: Eric Jenkins <erjenkin@microsoft.com>
2020-12-01 21:19:15 +03:00
|
|
|
- "Changelog"
|
2020-07-01 21:33:36 +03:00
|
|
|
Tag:
|
|
|
|
ExcludeSourceFile:
|
|
|
|
- output
|
2021-06-01 18:37:08 +03:00
|
|
|
- StigData/Archive # added to ignore orginal DISA STIG files duiring HQRM test due to TAB's causing test failure
|
2020-07-01 21:33:36 +03:00
|
|
|
ExcludeModuleFile:
|
2021-06-01 18:37:08 +03:00
|
|
|
- StigData/Archive # added to ignore orginal DISA STIG files duiring HQRM test due to TAB's causing test failure
|
2020-07-01 21:33:36 +03:00
|
|
|
Resolve-Dependency:
|
|
|
|
Gallery: 'PSGallery'
|
|
|
|
AllowPrerelease: false
|
|
|
|
Verbose: false
|
|
|
|
|
|
|
|
ModuleBuildTasks:
|
|
|
|
Sampler:
|
|
|
|
- '*.build.Sampler.ib.tasks'
|
|
|
|
|
|
|
|
# Invoke-Build Header to be used to 'decorate' the terminal output of the tasks.
|
|
|
|
TaskHeader: |
|
|
|
|
param($Path)
|
|
|
|
""
|
|
|
|
"=" * 79
|
|
|
|
Write-Build Cyan "`t`t`t$($Task.Name.replace("_"," ").ToUpper())"
|
|
|
|
Write-Build DarkGray "$(Get-BuildSynopsis $Task)"
|
|
|
|
"-" * 79
|
|
|
|
Write-Build DarkGray " $Path"
|
|
|
|
Write-Build DarkGray " $($Task.InvocationInfo.ScriptName):$($Task.InvocationInfo.ScriptLineNumber)"
|
|
|
|
""
|