Merge pull request #519 from MilenaHristova/enable-binskim

Enable Binskim scan in CI builds
dotnet · Jul 25, 2023 · d42b017 · d42b017
2 parents 1a3baf0 + f8cc116
commit d42b017
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
@@ -165,6 +165,8 @@ stages:
         enable: true
         continueOnError: false
         params: ' -SourceToolsList @("policheck","credscan")
+        -ArtifactToolsList @("binskim")
+        -BinskimAdditionalRunConfigParams @("IgnorePdbLoadError < True","Recurse < True")
         -TsaInstanceURL $(_TsaInstanceURL)
         -TsaProjectName $(_TsaProjectName)
         -TsaNotificationEmail $(_TsaNotificationEmail)