new pipelines: running compliance tools on all builds (#2480)

* testing moving sdl options to common file * testing config * remove extra config
microsoft · Nov 29, 2021 · 4451e34 · 4451e34
1 parent 4feb2cf
commit 4451e34
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 33 deletions.
diff --git a/.pipelines/pipeline.user.windows.buddy.yml b/.pipelines/pipeline.user.windows.buddy.yml
@@ -67,14 +67,3 @@ test:
       name: 'Custom tests'
       command: '.pipelines/04_test.cmd'
       fail_on_stderr: false
-
-static_analysis_options:
-  credscan_options:
-    fail_on_error: true
-  binskim_options:
-    fail_on_error: true
-    files_to_scan:
-      - from: 'src'
-  policheck_options:
-    scan_comments: true
-    fail_on_error: true
diff --git a/.pipelines/pipeline.user.windows.official.redfield.yml b/.pipelines/pipeline.user.windows.official.redfield.yml
@@ -67,14 +67,3 @@ test:
       name: 'Custom tests'
       command: '.pipelines/04_test.cmd'
       fail_on_stderr: false
-
-static_analysis_options:
-  credscan_options:
-    fail_on_error: true
-  binskim_options:
-    fail_on_error: true
-    files_to_scan:
-      - from: 'src'
-  policheck_options:
-    scan_comments: true
-    fail_on_error: true
diff --git a/.pipelines/pipeline.user.windows.official.yml b/.pipelines/pipeline.user.windows.official.yml
@@ -67,14 +67,3 @@ test:
       name: 'Custom tests'
       command: '.pipelines/04_test.cmd'
       fail_on_stderr: false
-
-static_analysis_options:
-  credscan_options:
-    fail_on_error: true
-  binskim_options:
-    fail_on_error: true
-    files_to_scan:
-      - from: 'src'
-  policheck_options:
-    scan_comments: true
-    fail_on_error: true
diff --git a/.pipelines/pipeline.user.yml b/.pipelines/pipeline.user.yml
@@ -2,3 +2,17 @@ artifact_publish_options:
   publish_to_legacy_artifacts: false
   publish_to_pipeline_artifacts: true
   publish_to_cloudvault_artifacts: false
+
+static_analysis_options:
+  credscan_options:
+    disable_tool_scan: false
+    fail_on_error: true
+  binskim_options:
+    disable_tool_scan: false
+    fail_on_error: true
+    files_to_scan:
+      - from: 'src'
+  policheck_options:
+    disable_tool_scan: false
+    fail_on_error: true
+    scan_comments: true