Azure DevOps
C2M scanner can run on Azure DevOps.
Sample
trigger:
- main
pool:
vmImage: ubuntu-latest
steps:
- script: |
echo "Downloading CWT..."
cd $BUILD_SOURCESDIRECTORY/..
mkdir scan_results
wget https://codewetrust-dist.s3-us-west-2.amazonaws.com/CodeWeTrustRunner_linux.tar.gz && tar -xzf CodeWeTrustRunner_linux.tar.gz
cd $BUILD_SOURCESDIRECTORY
echo "Running CWT Scanner..." # TODO license key must come from secrets. The key below is temporary.
$BUILD_SOURCESDIRECTORY/../CodeWeTrustRunner $BUILD_SOURCESDIRECTORY --product-name TestProductName --PipelineSettings:LicenseKey WMMJ-KLUE-M3MV-PTEP-PT7Y-XE4E-4XEK-KUTN --PipelineSettings:WriteExecutiveReport true --PipelineSettings:OutPath $BUILD_SOURCESDIRECTORY/../scan_results
displayName: 'Run CWT Scan'