verademo/azure-pipelines.yml at main · Rajkumarr77/verademo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
# Start with a minimal pipeline that you can customize to build and deploy your code.
trigger:
- main

pool:
  name: Default

steps:
- task: Maven@4
  inputs:
    mavenPomFile: 'app/pom.xml'
    publishJUnitResults: true
    testResultsFiles: '**/surefire-reports/TEST-*.xml'
    javaHomeOption: 'JDKVersion'
    mavenVersionOption: 'Default'
    mavenAuthenticateFeed: false
    effectivePomSkip: false
#     sonarQubeRunAnalysis: false
- task: Veracode@3
  inputs:
    ConnectionDetailsSelection: 'Service Connection'
    AnalysisService: 'Veracode'
    veracodeAppProfile: 'RRRTEST'
    version: '$(build.buildNumber)'
    filepath: 'app/target/verademo.war'
    optargs: '-deleteIncompleteScan 2'
    failBuildIfUploadAndScanBuildStepFails: true
    importResults: true
    maximumWaitTime: '120'

# - task: Veracode Flaw Importer@3
#   inputs:
#     ConnectionDetailsSelection: 'Service Connection'
#     AnalysisService: 'Veracode'
#     veracodeAppProfile: 'TESTjava'
#     sandboxName:
#     scanType: 'Static Analysis'
#     importType: 'All Flaws'
#     workItemType: 'Bug'
#     area: '$(system.teamProject)'
#     overwriteAreaPathInWorkItemsOnImport: true
#     iterationPath: '$(system.teamProject)'
#     overwriteIterationPath: true
#     flawImportLimit: '25'