sast-scan
sast-scan copied to clipboard
Not able to see scan result in dev azure due to sarif file empty
HTML contains scan result but sarif file is empty
Yml for pipeline:
trigger:
branches:
include:
- master
pool:
vmImage: ubuntu-latest
container: shiftleft/sast-scan:latest
steps:
- script: scan --build --type depscan --out_dir $(Build.ArtifactStagingDirectory)/CodeAnalysisLogs
displayName: "Perform Vulnerability Scan"
continueOnError: "true"
- task: PublishBuildArtifacts@1
displayName: "Publish scan logs"
inputs:
PathtoPublish: '$(Build.ArtifactStagingDirectory)/CodeAnalysisLogs'
ArtifactName: 'CodeAnalysisLogs'
publishLocation: 'Container'
StoreAsTar: true