Add glob pattern for binskim task (#325)

* update yaml files * revert compliance yaml and add glob pattern
microsoft · Dec 20, 2024 · 1dddd49 · 1dddd49
1 parent 67ee1f5
commit 1dddd49
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 6 deletions.
diff --git a/.vsts-ci.yml b/.vsts-ci.yml
@@ -36,6 +36,7 @@ extends:
       binskim:
         enabled: true
         scanOutputDirectoryOnly: true # BinSkim scans whole source tree but we only need to scan the output dir.
+        analyzeTargetGlob: +:f|$(Build.ArtifactStagingDirectory)\out\**;-:f|$(Build.ArtifactStagingDirectory)\out\**\*.test.*
       tsa:
         enabled: true
         configFile: $(Build.SourcesDirectory)\.config\tsaoptions.json

diff --git a/.vsts-compliance.yml b/.vsts-compliance.yml
@@ -46,6 +46,7 @@ extends:
       binskim:
         enabled: true
         scanOutputDirectoryOnly: true
+        analyzeTargetGlob: +:f|$(Build.ArtifactStagingDirectory)\out\**;-:f|$(Build.ArtifactStagingDirectory)\out\**\*.test.*
       codeql:
         compiled:
           enabled: true

diff --git a/pipelines/templates/build.yml b/pipelines/templates/build.yml
@@ -9,12 +9,6 @@ parameters:
   PublishArtifactTemplate: /pipelines/template/1es-publish-task.yml@self
 
 steps:
-- task: UseDotNet@2
-  displayName: "Install .NET SDK"
-  inputs:
-    packageType: sdk
-    version: 8.x
-
 - powershell: |
     dotnet tool install --tool-path "${env:AGENT_TOOLSDIRECTORY}\nbgv" nbgv
     $version = & "${env:AGENT_TOOLSDIRECTORY}\nbgv\nbgv.exe" get-version --variable SemVer1