diff --git a/eng/pipelines/guardian.yml b/eng/pipelines/guardian.yml new file mode 100644 index 000000000000..a9d3e24df0ac --- /dev/null +++ b/eng/pipelines/guardian.yml @@ -0,0 +1,28 @@ +trigger: none + +resources: + repositories: + - repository: 1ESPipelineTemplates + type: git + name: 1ESPipelineTemplates/1ESPipelineTemplates + ref: refs/tags/release + +variables: + - template: /eng/pipelines/templates/variables/image.yml + +extends: + template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates + parameters: + featureFlags: + incrementalSDLSourceAnalysis: true + sdl: + enableAllTools: false + sourceAnalysisPool: + name: $(WINDOWSPOOL) + image: $(WINDOWSVMIMAGE) + os: windows + credscan: + enabled: true + # This uses the Credscan Supression file from .config/CredScanSuppressions.json which is the default location for Credscan Suppression Files + policheck: + enabled: true