Skip to content

Commit

Permalink
add task retries for flaky sdl scanners
Browse files Browse the repository at this point in the history
  • Loading branch information
gracewehner committed Jan 12, 2024
1 parent a1e893e commit 85ff302
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions .pipelines/azure-pipeline-build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -265,18 +265,21 @@ jobs:
make
workingDirectory: $(Build.SourcesDirectory)/otelcollector/opentelemetry-collector-builder/
displayName: "SDL: build otelcollector, promconfigvalidator, targetallocator, and fluent-bit plugin for scanning"
retryCountOnTaskFailure: 1
- task: BinSkim@4
displayName: 'SDL: run binskim'
inputs:
InputType: 'CommandLine'
arguments: 'analyze --rich-return-code $(Build.SourcesDirectory)/otelcollector/opentelemetry-collector-builder/otelcollector $(Build.SourcesDirectory)/otelcollector/prom-config-validator-builder/promconfigvalidator $(Build.SourcesDirectory)/otelcollector/otel-allocator/targetallocator $(Build.SourcesDirectory)/otelcollector/fluent-bit/src/out_appinsights.so'
retryCountOnTaskFailure: 1

- task: Gosec@1
displayName: 'SDL: run gosec'
inputs:
targetPattern: 'gosecPattern'
targetGosecPattern: '$(Build.SourcesDirectory)/otelcollector'
retryCountOnTaskFailure: 1

- bash: |
wget https://github.com/microsoft/DevSkim/releases/download/v0.6.9/DevSkim_linux_0.6.9.zip
Expand All @@ -285,11 +288,13 @@ jobs:
./DevSkim_linux_0.6.9/devskim analyze $(Build.SourcesDirectory)/otelcollector --ignore-globs **/deploy/dashboard/**,**/react/static/** --severity critical,important
displayName: 'SDL: run devskim'
workingDirectory: $(Build.SourcesDirectory)
retryCountOnTaskFailure: 1
- bash: |
sudo gem install brakeman -v 5.4.1
brakeman $(Build.SourcesDirectory)/otelcollector/configmapparser --force
displayName: 'SDL: run brakeman'
retryCountOnTaskFailure: 1
- job: Linux_Prometheus_Collector
displayName: "Build: linux prometheus-collector image"
Expand Down

0 comments on commit 85ff302

Please sign in to comment.