Table of Contents

Azure DevOps

C2M scanner can run on Azure DevOps.

Sample

trigger:
- main

pool:
  vmImage: ubuntu-latest

steps:
- script: |
    echo "Downloading CWT..."
    cd $BUILD_SOURCESDIRECTORY/..
    mkdir scan_results
    wget https://codewetrust-dist.s3-us-west-2.amazonaws.com/CodeWeTrustRunner_linux.tar.gz && tar -xzf CodeWeTrustRunner_linux.tar.gz
    cd $BUILD_SOURCESDIRECTORY
    echo "Running CWT Scanner..." # TODO license key must come from secrets. The key below is temporary.
    $BUILD_SOURCESDIRECTORY/../CodeWeTrustRunner $BUILD_SOURCESDIRECTORY --product-name TestProductName --PipelineSettings:LicenseKey WMMJ-KLUE-M3MV-PTEP-PT7Y-XE4E-4XEK-KUTN --PipelineSettings:WriteExecutiveReport true --PipelineSettings:OutPath $BUILD_SOURCESDIRECTORY/../scan_results       
  displayName: 'Run CWT Scan'