-
Notifications
You must be signed in to change notification settings - Fork 16
/
azure-pipelines.yml
73 lines (60 loc) · 2.03 KB
/
azure-pipelines.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# ASP.NET
# Build and test ASP.NET projects.
# Add steps that publish symbols, save build artifacts, deploy, and more:
# https://docs.microsoft.com/azure/devops/pipelines/apps/aspnet/build-aspnet-4
trigger:
- main
pool:
vmImage: 'windows-latest'
variables:
- group: PumaLicense
- name: 'solution'
value: '**/*.sln'
- name: 'buildPlatform'
value: 'Any CPU'
- name: 'buildConfiguration'
value: 'Release'
steps:
- task: NuGetToolInstaller@1
- task: NuGetCommand@2
inputs:
restoreSolution: '$(solution)'
- task: puma-scan-pro-build-task@1
displayName: 'Puma Scan Professional'
inputs:
projectPath: 'PumaPrey.sln'
settingsFilename: '.pumafile'
scanResultsFormat: 'html,json,sarif'
outputFilename: '/PumaResults/pumaprey'
verboseMode: false
- task: PublishBuildArtifacts@1
displayName: 'Publish Artifact: PumaScan SARIF to CodeAnalysisLogs'
inputs:
PathtoPublish: '/PumaResults/pumaprey.sarif'
ArtifactName: CodeAnalysisLogs
- task: dependency-check-build-task@5
displayName: 'Dependency Check Analysis'
inputs:
projectName: '$(repositoryname)'
scanPath: '$(Build.StagingDirectory)/**/*.csproj'
format: 'SARIF'
reportsDirectory: '$(Build.StagingDirectory)/depcheck'
enableExperimental: true
additionalArguments: '--scan "$(Build.SourcesDirectory)\**\packages.config"'
dependencyCheckVersion: '6.1.2'
enableVerbose: false
- task: PublishBuildArtifacts@1
displayName: 'Publish Artifact: Dependency Check SARIF to CodeAnalysisLogs'
inputs:
PathtoPublish: '$(Build.StagingDirectory)/depcheck/dependency-check-report.sarif'
ArtifactName: CodeAnalysisLogs
- task: VSBuild@1
inputs:
solution: '$(solution)'
msbuildArgs: '/p:DeployOnBuild=true /p:WebPublishMethod=Package /p:PackageAsSingleFile=true /p:SkipInvalidConfigurations=true /p:PackageLocation="$(build.artifactStagingDirectory)"'
platform: '$(buildPlatform)'
configuration: '$(buildConfiguration)'
- task: VSTest@2
inputs:
platform: '$(buildPlatform)'
configuration: '$(buildConfiguration)'