Add steps to SDL pipeline (#195304)

* Add recommended publish logs task

* Add PS script analyzer
This commit is contained in:
Raymond Zhao 2023-10-10 14:37:56 -07:00 committed by GitHub
parent 52d845ac5c
commit 32ddc9b714
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -144,6 +144,12 @@ stages:
GITHUB_TOKEN: "$(github-distro-mixin-password)"
displayName: Download Symbols
- task: PSScriptAnalyzer@1
inputs:
Path: '$(Build.SourcesDirectory)'
Settings: required
Recurse: true
- task: BinSkim@4
inputs:
InputType: "Basic"
@ -164,6 +170,13 @@ stages:
SignatureFreshness: 'OneDay'
TreatStaleSignatureAs: 'Error'
- task: PublishSecurityAnalysisLogs@3
inputs:
ArtifactName: CodeAnalysisLogs
ArtifactType: Container
PublishProcessedResults: false
AllTools: true
- task: TSAUpload@2
inputs:
GdnPublishTsaOnboard: true