azure-pipelines-dastardly.yml

trigger:
  paths:
    include: ['14-dastardly-burp-cicd-dast-scanning/azure-pipelines-dastardly.yml']

resources:
- repo: self

variables:
  url_to_scan: 'https://uatbrokerportal.hoxtoninsuranceservices.com'

stages:
- stage: dast
  displayName: dast scanning
  jobs:
  - job: dast_dastardly
    displayName: MNP
    pool:
      vmImage: ubuntu-latest
    steps:

    - task: CmdLine@2
      displayName: Run DAST scan with dastardly
      inputs:
        script: |
          docker run --user $(id -u) --rm -v $(pwd):/dastardly -e \
          DASTARDLY_TARGET_URL=$(url_to_scan) -e \
          DASTARDLY_OUTPUT_FILE=/dastardly/dastardly-report.xml \
          public.ecr.aws/portswigger/dastardly:latest
          true
        failOnStderr: false
        workingDirectory: '$(Build.SourcesDirectory)'

    - task: PublishTestResults@2
      displayName: Publish Test Results
      inputs:
        testResultsFormat: 'JUnit'
        testResultsFiles: '**/dastardly-report.xml'