Dependency check task #16
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…f dependency-check batch/shell file
* Exclude no console rule * Correct eslint errors, move util functions in to runtime and handle asyncs better * Add a utility helper * Add some local debugging stuff * Start migrating away from request module [Test for http]
* Initial commit for mock task runner * Fix path building for taskrunner * Fix how we build paths to files * Update npm test script
… instead of @azure/storage-blob
* Moved task contents to a task folder for Azure DevOps task to function
… trimmedDatabaseEndpoint
added 6 commits
February 28, 2020 09:37
…cyCheck/azure-pipelines.yml
adam230594
approved these changes
Feb 28, 2020
|
I would like to see a demo before it's merged please 👍 |
|
Had a run through with @jack-education and am happy for MVS. @jack-education Does CI update the task version for us? |
@chelnak It doesn't, shall I look to add it as part of MVS? |
|
Maybe not for MVS but it needs to be there asap afterwards. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Build task to identify vulnerable dependencies.
Uses the OWASP Dependency Check CLI tool:
https://owasp.org/www-project-dependency-check/
https://jeremylong.github.io/DependencyCheck/dependency-check-cli/index.html
Sends the results to log analytics for visibility in grafana.