Added credscan steps for python (#16136)

Azure · Jan 20, 2021 · 4e7bbb5 · 4e7bbb5
1 parent dd14599
commit 4e7bbb5
Show file tree

Hide file tree

Showing 3 changed files with 5,636 additions and 0 deletions.
diff --git a/eng/CredScanSuppression.json b/eng/CredScanSuppression.json
@@ -0,0 +1,4 @@
+{
+    "tool": "Credential Scanner",
+    "suppressions": []
+}
diff --git a/eng/pipelines/aggregate-reports.yml b/eng/pipelines/aggregate-reports.yml
@@ -17,6 +17,23 @@ jobs:
     vmImage: 'windows-2019'
 
   steps:
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@3
+    displayName: 'Run CredScan'
+    inputs:
+      suppressionsFile: 'eng\CredScanSuppression.json'
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@2
+    displayName: 'Post Analysis'
+    inputs:
+      GdnBreakAllTools: false
+      GdnBreakGdnToolCredScan: true
+      GdnBreakGdnToolCredScanSeverity: Error
+      GdnBreakBaselineFiles: $(Build.SourcesDirectory)\eng\python.gdnbaselines
+      GdnBreakBaselines: baseline     
+    continueOnError: true
+  - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@3
+    displayName: 'Publish Security Analysis Logs'
+    continueOnError: true
+    condition: succeededOrFailed()
   - template: /eng/pipelines/templates/steps/analyze_dependency.yml
 
   - task: AzureFileCopy@2