diff --git a/build/pipelines/azure-pipelines.ci.yaml b/build/pipelines/azure-pipelines.ci.yaml index d5df819d..eaa9f054 100644 --- a/build/pipelines/azure-pipelines.ci.yaml +++ b/build/pipelines/azure-pipelines.ci.yaml @@ -30,6 +30,10 @@ extends: image: MMSWindows2022-Secure os: windows + sdl: + binskim: + enabled: false + stages: - stage: Calculator jobs: diff --git a/build/pipelines/templates/build-single-architecture.yaml b/build/pipelines/templates/build-single-architecture.yaml index 29182cec..9aaeed85 100644 --- a/build/pipelines/templates/build-single-architecture.yaml +++ b/build/pipelines/templates/build-single-architecture.yaml @@ -75,28 +75,28 @@ jobs: configuration: $(BuildConfiguration) maximumCpuCount: true - - task: CopyFiles@2 - displayName: Copy Files for BinSkim analysis - inputs: - SourceFolder: '$(Build.BinariesDirectory)\$(BuildConfiguration)\$(BuildPlatform)\Calculator\' - # Setting up a folder to store all the binary files that we need BinSkim to scan. - # If we put more things than we produce pdbs for and can index (such as nuget packages that ship without pdbs), binskim will fail. - # Below are ignored files - # - clrcompression.dll - # - WebView2Loader.dll - # - Microsoft.Web.WebView2.Core.dll - Contents: | - **\* - !**\clrcompression.dll - !**\WebView2Loader.dll - !**\Microsoft.Web.WebView2.Core.dll - TargetFolder: '$(Agent.BuildDirectory)\binskim' - CleanTargetFolder: true - OverWrite: true - flattenFolders: false - analyzeTarget: '$(Agent.BuildDirectory)\binskim\*' - - ${{ if eq(parameters.isReleaseBuild, true) }}: + - task: CopyFiles@2 + displayName: Copy Files for BinSkim analysis + inputs: + SourceFolder: '$(Build.BinariesDirectory)\$(BuildConfiguration)\$(BuildPlatform)\Calculator\' + # Setting up a folder to store all the binary files that we need BinSkim to scan. + # If we put more things than we produce pdbs for and can index (such as nuget packages that ship without pdbs), binskim will fail. + # Below are ignored files + # - clrcompression.dll + # - WebView2Loader.dll + # - Microsoft.Web.WebView2.Core.dll + Contents: | + **\* + !**\clrcompression.dll + !**\WebView2Loader.dll + !**\Microsoft.Web.WebView2.Core.dll + TargetFolder: '$(Agent.BuildDirectory)\binskim' + CleanTargetFolder: true + OverWrite: true + flattenFolders: false + analyzeTarget: '$(Agent.BuildDirectory)\binskim\*' + - task: PublishSymbols@2 displayName: Publish symbols inputs: