This repository has been archived by the owner on May 1, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 164
/
azure-pipelines-compliance.yml
77 lines (66 loc) · 1.87 KB
/
azure-pipelines-compliance.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
variables:
codeBaseName: 'xamarin_GoogleApisForiOSComponents'
areaPath: 'DevDiv\VS Client - Runtime SDKs\[Archived] Components'
iterationPath: 'DevDiv\Future Backlog'
Codeql.Enabled: true
timeoutInMinutes: 360
continueOnError: 'true'
poolName: 'Azure Pipelines'
imageName: 'macOS-latest'
verbosity: 'diagnostic'
resources:
repositories:
- repository: yaml-templates
type: github
name: xamarin/yaml-templates
endpoint: xamarin
ref: refs/heads/main
schedules:
- cron: '0 12 * * 0'
displayName: 'Weekly Compliance Check'
branches:
include: [ 'main' ]
always: false
pool:
name: $(poolName)
vmImage: $(imageName)
steps:
- checkout: self
# CodeQL Init
- task: CodeQL3000Init@0
displayName: CodeQL Init
# Component Governance
- template: security/component-governance/v0.yml@yaml-templates
# CredScan
- template: security/credscan/v3.yml@yaml-templates
# PoliCheck
- template: security/policheck/v2.yml@yaml-templates
# Publish Report
- template: security/publish-report/v2.yml@yaml-templates
# CodeQL Finalize
- task: CodeQL3000Finalize@0
displayName: CodeQL Finalize
# TSA Upload
- task: TSAUpload@1
continueOnError: true
inputs:
tsaVersion: 'TsaV2'
codebase: 'NewOrUpdate'
tsaEnvironment: 'PROD'
codeBaseName: $(codeBaseName)
notifyAlwaysV2: false
instanceUrlForTsaV2: 'DEVDIV'
projectNameDEVDIV: 'DevDiv'
areaPath: $(areaPath)
iterationPath: $(iterationPath)
uploadAPIScan: false
uploadBinSkim: false
uploadCredScan: true
uploadFortifySCA: false
uploadFxCop: false
uploadModernCop: false
uploadPoliCheck: true
uploadPREfast: false
uploadRoslyn: false
uploadTSLint: false
uploadAsync: true