Merge pull request #147 from nhsuk/add-owasp-check

Add OWASP check to build pipeline
nhsuk · Jan 9, 2023 · 8605c11 · 8605c11
2 parents 76a37a1 + 82835f2
commit 8605c11
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
@@ -36,6 +36,22 @@ steps:
 - script: CI=true npm run test
   displayName: testing
 
+- task: dependency-check-build-task@6
+  displayName: 'Run OWASP Dependency Check'
+  inputs:
+    projectName: 'cookie-consent'
+    scanPath: '$(Build.SourcesDirectory)'
+    format: 'HTML, JUNIT'
+    reportsDirectory: '$(System.DefaultWorkingDirectory)/dependency-scan-results'
+
+- task: PublishTestResults@2
+  displayName: 'Publish OWASP Dependency Check Results'
+  inputs:
+    testResultsFormat: 'JUnit'
+    testResultsFiles: '$(System.DefaultWorkingDirectory)/dependency-scan-results/*junit.xml'
+    testRunTitle: 'Dependency check'
+    searchFolder: '$(Common.TestResultsDirectory)'
+
 - task: SonarQubeAnalyze@5
 
 - task: SonarQubePublish@5