security-tools.yml

# Security tools
name: 1.0.$(Year:yy)$(DayOfYear).$(Rev:r) # This is the build number

trigger: none
pr: none
schedules:
- cron: "0 0 * * *"
  displayName: Daily at midnight
  branches:
    include:
    - main
    - releases/*
    
pool:
  name: d365bc-agentpool-nonprod-build

resources:
  repositories:
  - repository: PipelineTemplates
    type: git
    name: Infrastructure-PipelineTemplates
    ref: master

variables:
- template: security-tools-full-variables.yml@PipelineTemplates
- template: ./variables-common.yml

jobs:
- job: default_job
  displayName: Run security tools
  timeoutInMinutes: 480
  steps:
  - checkout: self
    fetchTags: 'true'
  - template: security-tools-full.yml@PipelineTemplates
    parameters:
      OutputPath: $(OutputPath)
      SourcePath: $(SourcePath)
      BuildCommand: Powershell.exe -NonInteractive "cd $(Build.SourcesDirectory); .\build.ps1 -ALGoProject 'System Application' -AutoFill"
      GdnSuppressFile: $(Build.SourcesDirectory)\.azuredevops\security-tools.gdnsuppress
      ExcludeSecurityTools:
      - CodeSignValidation # Not applicable yet (Code is not signed on Github) 
      IncludeOfficialBuildTools:
      - ComponentGovernance
      ${{ if eq(variables['Build.SourceBranch'], 'refs/heads/main') }}:
        TSA: true
        TSAIncludeTools: 'PoliCheck'