Skip to content

Commit

Permalink
[ci] Improve binskim scan performance (#137)
Browse files Browse the repository at this point in the history
Context: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/binskim#limiting-binskim-to-output-directory-in-sdl-binary-analysis

Attempts to speed up artifact publishing steps by telling `binskim` to
only scan the directory that contains the artifacts being uploaded.
  • Loading branch information
pjcollins authored Feb 26, 2024
1 parent 577147e commit afef4b2
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions azure-pipelines.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,8 @@ extends:
sdl:
${{ if eq('${{ parameters.Skip1ESComplianceTasks }}', 'true') }}:
enableAllTools: false
binskim:
scanOutputDirectoryOnly: true
codeql:
runSourceLanguagesInSourceAnalysis: true
suppression:
Expand Down

0 comments on commit afef4b2

Please sign in to comment.