Pipeline for static analysis

[skip ci]

azure-pipelines.yml

@@ -0,0 +1,39 @@
+trigger:
+- main
+
+pool:
+  vmImage: 'windows-latest'
+
+steps:
+- task: CredScan@2
+  inputs:
+    toolMajorVersion: 'V2'
+- task: ESLint@1
+  inputs:
+    Configuration: 'recommended'
+    TargetType: 'eslint'
+    ErrorLevel: 'warn'
+
+- task: Semmle@1
+  env: 
+    SYSTEM_ACCESSTOKEN: $(System.AccessToken)
+  inputs:
+    sourceCodeDirectory: '$(Build.SourcesDirectory)'
+    language: 'python'
+    querySuite: 'Recommended'
+    timeout: '1800'
+    ram: '16384'
+    addProjectDirToScanningExclusionList: true
+
+- task: ComponentGovernanceComponentDetection@0
+  inputs:
+    scanType: 'Register'
+    verbosity: 'Verbose'
+    alertWarningLevel: 'High'
+
+- task: PublishSecurityAnalysisLogs@2
+  inputs:
+    ArtifactName: 'CodeAnalysisLogs'
+    ArtifactType: 'Container'
+    AllTools: true
+    ToolLogsNotFoundAction: 'Standard'