b2f4f4484c
* Draft: Dotnet6 migration (#3879) * Agent on .NET 6 (draft) * Suppress object dispose warnings * Fixed test code analysis * disable RHEL6 * Disable RHEL6, install dotnet 6.0.2 * Disable RHEL6 * fix Winx86 pipeline * Install dotnet x86 * fix dotnet 6 migrations warnings * bump git verstion to 2.36.1 (#3839) Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com> * Removed NPM module and executable which comes with NodeJS fox non windows distribution (#3833) * Removem NPM module and executable which comes with NodeJS fox non windows distribution * Changed the logic from || and && when removing NPM Co-authored-by: Denis Rumyantsev <mr.denis.rumyantsev@gmail.com> Co-authored-by: Alexander Smolyakov <v-alsmo@microsoft.com> * Added message - in case when account is not managed, but WindowsLogon… (#3845) * Added message - in case when account is not managed, but WindowsLogonPassword was not specified * Added message - in case when account is not managed, but WindowsLogonPassword was not specified * Fixed typo with condition * Fixed indents Co-authored-by: AndreyIvanov42 <93121155+AndreyIvanov42@users.noreply.github.com> * update scripts / rebase * add RHEL6 warning * Agent on .NET 6 (draft) * Suppress object dispose warnings * disable RHEL6 * Disable RHEL6, install dotnet 6.0.2 * fix Winx86 pipeline * Install dotnet x86 * fix dotnet 6 migrations warnings * update azure pipeline to use dotnet 6.0.200 * fix yml indentation * fix windows-x32 pipeline * Update build-job.yml * disable docker detector for legacy containers * disable security checks * disable security checks * Update build-job.yml * Update build-job.yml * Update build-job.yml * update config.sh for net6 support * add native support of the node16 on mac m1 * add osx-arm64 pipeline * fix job name for macos-arm64 * update pipelines for osx-arm64 support * Update build-job.yml * Update build-job.yml * update macos image & disable unit test for osx-arm64 * Update pipeline.yml * switch back to macos-10.15 * set macos image to macos-12 * add osx-arm64 as allowed package * set image to 10.15 * disable falling test for macos * update .NET SDK to 6.0.302 * node16 knob & skip tests on macos * add rhel7 * update pipeline for RHEL7 * update pipeline for rhel7.2 * update pipelines (RHEL7.2) * Update pipeline.yml * update image reference * update runtime framework to 6.0.7 * Update pipeline.yml Co-authored-by: Denis Rumyantsev <v-denisr@microsoft.com> Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com> Co-authored-by: AndreyIvanov42 <93121155+AndreyIvanov42@users.noreply.github.com> Co-authored-by: Max Podriezov <maxpodriezov@microsoft.com> Co-authored-by: Denis Rumyantsev <mr.denis.rumyantsev@gmail.com> Co-authored-by: Alexander Smolyakov <v-alsmo@microsoft.com> Co-authored-by: Anatoly Bolshakov <v-anbols@microsoft.com> Co-authored-by: Liliia Sabitova <107196662+LiliaSabitova@users.noreply.github.com> * added logic to skip downgrade if agent have version 3.* and server version is 2.* (#3996) * fix issues after conflict resolving (#4001) * Fix GitHub only release condition (#4002) * BUG 1972388: vsbuild task in YAML build pipeline hangs forever in ADO even though the task has already logged completion (#3979) * moved logic to drain queue in separate method "DrainQueues" * Implemented a call of method "DrainQueues" once step is completed * Simplified syntax of property 'JobServerQueue' * Fix condition for onlyGitHubRelease Co-authored-by: Sergey Koryshev <sergey.koryshev@akvelon.com> * Remove condition from Blob store step * remove branch check on createBranch step * fix pipeline / update agent version * Fixed NullReferenceException in v3.212.0 preview version Agent (#4018) Fix for PublishTelemetry: Added check for taskDefinition.Data.Execution, because it turned out that not all tasks have Execution information. * Update dotnet6-agent from master (#4068) Update dotnet6-agent branch from master * Update releaseNote.md * Fix CA2000 error with secrets masker * update System.IO.FileSystem.AccessControl * Update Common.props (#4109) * Update dotnet6-agent branch from master (#4128) * Catch updating exception (#4082) * Node16 version updated to 16.17.1" (#4084) * Bump ubuntu image version to 20.04 (#4079) * Prevent creating host container network (#3788) * Prevent creating host container network * Remove redundant empty lines * Fix invalid knob value fetching * Update ContainerOperationProvider.cs Co-authored-by: Denis Rumyantsev <mr.denis.rumyantsev@gmail.com> Co-authored-by: Kirill Ivlev <102740624+kirill-ivlev@users.noreply.github.com> Co-authored-by: Konstantin Tyukalov <52399739+KonstantinTyukalov@users.noreply.github.com> * Allow env.sh to accept additional env var names (#3339) The hard-coded list is not necessarily enough. This allows the caller to specify additional environment variables to write to .env. Co-authored-by: Konstantin Tyukalov <52399739+KonstantinTyukalov@users.noreply.github.com> Co-authored-by: Kirill Ivlev <102740624+kirill-ivlev@users.noreply.github.com> * Revert "Fix execution of scripts in variables (#4016)" (#4088) This reverts commit |
||
---|---|---|
.. | ||
CredScanPatternExtractor.cs | ||
CredScanRegexes.csproj | ||
PatternProcessor.cs | ||
Program.cs | ||
nuget.config | ||
readme.md |
readme.md
CredScan Regex Extractor
CredScan, an internal Microsoft tool, detects credentials using a variety of mechanisms. Its goal is to keep those credentials from ending up in the wrong place: a Git repository, test logs, etc. It would be perfect for helping scrub build & release logs.
CredScan is not available publicly, so we cannot ship it with the Pipelines agent. We have secured permission to ship a small subset of CredScan -- its set of battle-tested regexes for detecting common credential formats. This tool extracts the regexes from CredScan's knowledge base and outputs them in a format suitable for shipping with the agent.
Requirements:
- .NET 6.0 or higher
- The Azure Artifacts credential provider
- Access to the "msazure" org's CredScanSDK feed
To run this tool:
- Extract the credential provider to the right place on your system
dotnet build --interactive
(so you get prompted to auth to the feed)dotnet run > ../../src/Microsoft.VisualStudio.Services.Agent/AdditionalMaskingRegexes.CredScan.cs
You must check in the generated code after running this tool.
At the time of writing, the target file is src/Microsoft.VisualStudio.Services.Agent/AdditionalMaskingRegexes.CredScan.cs
.