Inicio Explorar Ayuda
Iniciar sesión
SoftwareDesign
/
EVCB_OCPP.Common
8
0
Fork 0
Archivos Incidencias 0 Pull Requests 0 Wiki
Árbol: 7d039ebb1a
Ramas Etiquetas
EVCB_OCPP.Commo...
/
azure-security.yaml

azure-security.yaml 2.0 KB
Histórico Raw

12345678910111213141516171819202122232425262728293031323334353637383940414243 
  1. trigger:
    2. 

  2.   branches:
    3. 

  3.     include:
    4. 

  4.       - '*'
    5. 

  5. 

  6. pool:
    7. 

  7.   # Additional hosted image options are available: https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/hosted#software
    8. 

  8.   vmImage: ubuntu-latest
    9. 

  9. 

  10. steps:
    11. 

  11. 

  12.   - task: AdvancedSecurity-Codeql-Init@1
    13. 

  13.     inputs:
    14. 

  14.       languages: "csharp"
    15. 

  15.       # Supported languages: csharp, cpp, go, java, javascript, python, ruby, swift
    16. 

  16.       # You can customize the initialize task: https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/advanced-security-codeql-init-v1?view=azure-pipelines
    17. 

  17.       # If you're using a self-hosted agent to run CodeQL, use `enableAutomaticCodeQLInstall` to automatically use the latest CodeQL bits on your agent:
    18. 

  18.       enableAutomaticCodeQLInstall: true
    19. 

  19. 

  20. #   Add your custom build steps here
    21. 

  21. # - Ensure that all code to be scanned is compiled (often using a `clean` command to ensure you're building from a clean state).
    22. 

  22. # - Disable the use of any build caching mechanisms as this can interfere with CodeQL's ability to capture all the necessary data during the build.
    23. 

  23. # - Disable the use of any distributed/multithreaded/incremental builds as CodeQL needs to monitor executions of the compiler to construct an accurate representation of the application.
    24. 

  24. # - For dependency scanning, ensure you have a package restore step for more accurate results.
    25. 

  25. 

  26.   
    27. 

  27. 

  28.   # Restore project
    29. 

  29.   - task: DotNetCoreCLI@2
    30. 

  30.     inputs:
    31. 

  31.         command: 'custom'
    32. 

  32.         custom: 'restore'
    33. 

  33. 

  34.   # Build project
    35. 

  35.   - task: DotNetCoreCLI@2
    36. 

  36.     inputs:
    37. 

  37.         command: 'custom'
    38. 

  38.         custom: 'build'
    39. 

  39.         arguments: '--no-restore'
    40. 

  40. 

  41.   - task: AdvancedSecurity-Dependency-Scanning@1 # More details on this task: https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/advanced-security-dependency-scanning-v1?view=azure-pipelines
    42. 

  42. 

  43.   - task: AdvancedSecurity-Codeql-Analyze@1 # More details on this task: https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/advanced-security-codeql-analyze-v1?view=azure-pipelines
    44.