diff options
author | Dominique Louis <dolouis@microsoft.com> | 2020-07-30 17:33:35 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-07-30 17:33:35 +0300 |
commit | bf6ffc813270a42136d223f3d7f3f0d06d7d988f (patch) | |
tree | 63fad13283da196cfb0371992c4fc6040f43367e | |
parent | 2a1b772c42cb3972708cfdc5ca28cc60d1836641 (diff) |
Add Initial Support for PoliCheck and CredScan (#753)
* Add Initial Support for PoliCheck.
* Added missing Host Variable.
* Move poli-check to top. Add CredScan too.
* Fix chack typo.
-rw-r--r-- | CredScanSuppressions.json | 6 | ||||
-rw-r--r-- | azure-pipelines.yaml | 33 |
2 files changed, 39 insertions, 0 deletions
diff --git a/CredScanSuppressions.json b/CredScanSuppressions.json new file mode 100644 index 0000000..c02bb2d --- /dev/null +++ b/CredScanSuppressions.json @@ -0,0 +1,6 @@ +{ + "tool": "Credential Scanner", + "suppressions": [ + + ] +}
\ No newline at end of file diff --git a/azure-pipelines.yaml b/azure-pipelines.yaml index 9e984ad..4f8895a 100644 --- a/azure-pipelines.yaml +++ b/azure-pipelines.yaml @@ -1,5 +1,9 @@ name: $(BuildID) +variables: +- name: HostedWinVS2019 + value: Hosted Windows 2019 with VS2019 + trigger: branches: include: [ master, d16-* ] @@ -10,8 +14,37 @@ pr: resources: repositories: - repository: self + - repository: templates + type: github + name: xamarin/yaml-templates + ref: refs/heads/master + endpoint: xamarin stages: + - stage: code_analysis + displayName: Code Analysis + jobs: + # Check - "PoliCheck" + - job: run_policheck_compliance + displayName: 'Policheck Compliance' + pool: $(HostedWinVS2019) + timeoutInMinutes: 60 + cancelTimeoutInMinutes: 5 + steps: + - checkout: self + - template: security/policheck/v1.yml@templates + # Check - "Xamarin PropertyEditing (Code Analysis CredScan)" + - job: run_static_analysis + displayName: CredScan + pool: $(HostedWinVS2019) + timeoutInMinutes: 60 + cancelTimeoutInMinutes: 5 + steps: + - checkout: self + - template: security/xa-static-analysis/v2.yml@templates + parameters: + credScanSuppressionsFile: $(System.DefaultWorkingDirectory)/CredScanSuppressions.json + - stage: Windows dependsOn: [] jobs: |