huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #16673 from aspnet/SDL 

Enable SDL validation in rel/3.1
This commit is contained in:
William Godbe 2019-10-30 16:56:51 -07:00 committed by GitHub
parent 8669ce3f69 9f903018d7
commit 11a84e25b4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
.azure/pipelines/ci.yml
View File

@ -65,7 +65,10 @@ variables:
valule: test valule: test
- name: _PublishArgs - name: _PublishArgs
value: '' value: ''
# used for post-build phases, internal builds only
- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
- group: DotNet-AspNet-SDLValidation-Params
stages: stages:
- stage: build - stage: build
displayName: Build displayName: Build
@ -634,3 +637,17 @@ stages:
enableSymbolValidation: false enableSymbolValidation: false
enableSigningValidation: false enableSigningValidation: false
publishInstallersAndChecksums: true publishInstallersAndChecksums: true
# This is to enable SDL runs part of Post-Build Validation Stage
SDLValidationParameters:
enable: true
continueOnError: false
params: ' -SourceToolsList @("policheck","credscan")
-TsaInstanceURL $(_TsaInstanceURL)
-TsaProjectName $(_TsaProjectName)
-TsaNotificationEmail $(_TsaNotificationEmail)
-TsaCodebaseAdmin $(_TsaCodebaseAdmin)
-TsaBugAreaPath $(_TsaBugAreaPath)
-TsaIterationPath $(_TsaIterationPath)
-TsaRepositoryName "AspNetCore"
-TsaCodebaseName "AspNetCore"
-TsaPublish $True'