Skip to content

Commit

Permalink
Add malware scan (#2942)
Browse files Browse the repository at this point in the history
* Add malware scan.

* Actually add malware scan.

* Move malware task and stop immediately.
  • Loading branch information
philliphoff committed May 14, 2021
1 parent 57d779f commit 5fbb515
Showing 1 changed file with 11 additions and 4 deletions.
15 changes: 11 additions & 4 deletions .azure-pipelines/compliance/compliance.yml
Original file line number Diff line number Diff line change
@@ -1,26 +1,33 @@
steps:
- task: securedevelopmentteam.vss-secure-development-tools.build-task-antimalware.AntiMalware@3
displayName: 'AntiMalware Scanner'
inputs:
FileDirPath: '$(Build.SourcesDirectory)'
EnableServices: true
condition: in(variables['Build.Reason'], 'Manual', 'Schedule')

- task: securedevelopmentteam.vss-secure-development-tools.build-task-policheck.PoliCheck@1
displayName: 'Run PoliCheck'
inputs:
targetType: F # search files and folders
optionsUEPATH: '$(Build.SourcesDirectory)/.azure-pipelines/compliance/PoliCheckExclusions.xml'
continueOnError: true
condition: eq(variables['Build.Reason'], 'Schedule')
condition: in(variables['Build.Reason'], 'Manual', 'Schedule')

- task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@2
displayName: 'Run CredScan'
inputs:
toolMajorVersion: V2
suppressionsFile: '$(Build.SourcesDirectory)/.azure-pipelines/compliance/CredScanSuppressions.json'
continueOnError: true
condition: eq(variables['Build.Reason'], 'Schedule')
condition: in(variables['Build.Reason'], 'Manual', 'Schedule')

- task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
displayName: 'Publish Security Analysis Logs'
condition: eq(variables['Build.Reason'], 'Schedule')
condition: in(variables['Build.Reason'], 'Manual', 'Schedule')

- task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@1
displayName: 'Post Analysis'
inputs:
AllTools: true
condition: eq(variables['Build.Reason'], 'Schedule')
condition: in(variables['Build.Reason'], 'Manual', 'Schedule')

0 comments on commit 5fbb515

Please sign in to comment.