azure-pipelines.yml

# Node.js with Vue
# Build a Node.js project that uses Vue.
# Add steps that analyze code, save build artifacts, deploy, and more:
# https://docs.microsoft.com/azure/devops/pipelines/languages/javascript

trigger:
- main
- feature/*

pool:
  vmImage: ubuntu-20.04

steps:
- task: NodeTool@0
  inputs:
    versionSpec: '14.x'
  displayName: 'Install Node.js'

- script: |
    curl https://cdn.shiftleft.io/download/sl > $(Agent.HomeDirectory)/sl && chmod a+rx $(Agent.HomeDirectory)/sl
    $(Agent.HomeDirectory)/sl analyze --app sl-react-az --verbose --wait --tag branch=$(Build.SourceBranchName) --js --cpg .
  displayName: 'ShiftLeft NG SAST'
  workingDirectory: '$(Build.SourcesDirectory)'
  env:
    SHIFTLEFT_ACCESS_TOKEN: $(SHIFTLEFT_ACCESS_TOKEN)

- script: |
    $(Agent.HomeDirectory)/sl check-analysis --v2 --app sl-react-az
  displayName: 'ShiftLeft check analysis'
  workingDirectory: '$(Build.SourcesDirectory)'
  continueOnError: "true"
  env:
    SHIFTLEFT_ACCESS_TOKEN: $(SHIFTLEFT_ACCESS_TOKEN)