课程: Learning GitHub Advanced Security for Azure DevOps

今天就学习课程吧!

今天就开通帐号,24,600 门业界名师课程任您挑!

Configure code scanning in your pipeline

Configure code scanning in your pipeline

- [Instructor] I want to take you through the steps that are needed to configure and run code scanning in your pipelines. I'm going to show the steps through the sample definition in the demo repository. This .NET project uses NuGet, which is the package manager used in C#. The first task here runs a package restore to download all the configured dependencies for our repository. Next, we run the build task and compile the application. After which the unit tests for the project are executed, you can already see the advanced security steps on the right panel. First of all, we need to initialize the environment to be ready for the database configuration. This step can be placed anywhere before you start compiling the application. I'm adding here after the .NET restore task. You can see that there are some settings available to configure here. First, we can configure the languages that we want to run a CodeQL scan for.…

内容