Added sdl_steps yaml

Azure · Jun 12, 2023 · 53f81db · 53f81db
1 parent 090546f
commit 53f81db
Show file tree

Hide file tree

Showing 2 changed files with 33 additions and 30 deletions.
diff --git a/vsts/common/sdl_steps.yaml b/vsts/common/sdl_steps.yaml
@@ -0,0 +1,28 @@
+# SDL tasks
+steps:
+- task: CredScan@3
+  displayName: "Credential Scan"
+  inputs:
+    outputFormat: 'pre'
+    scanFolder: $(Build.SourcesDirectory)
+- task: securedevelopmentteam.vss-secure-development-tools.build-task-policheck.PoliCheck@2
+  displayName: 'Run PoliCheck'
+  inputs:
+    targetType: F
+- task: PostAnalysis@2
+  displayName: "SDL Analysis"
+  inputs:
+    AllTools: false
+    APIScan: false
+    BinSkim: false
+    CodesignValidation: false
+    CredScan: true
+    FortifySCA: false
+    FxCop: false
+    ModernCop: false
+    PoliCheck: true
+    RoslynAnalyzers: false
+    SDLNativeRules: false
+    Semmle: false
+    TSLint: false
+    ToolLogsNotFoundAction: 'Standard'
diff --git a/vsts/node-nightly-windows.yaml b/vsts/node-nightly-windows.yaml
@@ -34,33 +34,8 @@ stages:
     displayName: 'SDL checks'
     pool:
       vmImage: 'windows-latest'
-  - steps:
-    - task: CredScan@3
-    displayName: "Credential Scan"
-    inputs:
-      outputFormat: 'pre'
-      scanFolder: $(Build.SourcesDirectory)
-    - task: securedevelopmentteam.vss-secure-development-tools.build-task-policheck.PoliCheck@2
-    displayName: 'Run PoliCheck'
-    inputs:
-      targetType: F
-    - task: PostAnalysis@2
-    displayName: "SDL Analysis"
-    inputs:
-      AllTools: false
-      APIScan: false
-      BinSkim: false
-      CodesignValidation: false
-      CredScan: true
-      FortifySCA: false
-      FxCop: false
-      ModernCop: false
-      PoliCheck: true
-      RoslynAnalyzers: false
-      SDLNativeRules: false
-      Semmle: false
-      TSLint: false
-      ToolLogsNotFoundAction: 'Standard'
+    steps:
+    - template: common/sdl_steps.yaml
 
 - stage: Test
   dependsOn: ['SDL']
@@ -74,9 +49,9 @@ stages:
         - ImageOverride -equals $(vmImage)
     steps:
     - task: NodeTool@0
-    displayName: 'Use Node 14.x'
-    inputs:
-      versionSpec: '14.x'
+      displayName: 'Use Node 14.x'
+      inputs:
+        versionSpec: '14.x'
 
     # Unit tests
     - script: |