Validate Azure DevOps pipeline steps (integration of other SAST/SCA tooling)

[markl11]

Hi,

Could I also use this to check for the existence of certain steps in an Azure DevOps YAML pipeline? Does it have this capability? For example, if there is a step that uses SonarQube or Nexus IQ - ie. can MSDO scan the following Azure DevOps YAML file and look for the existence of the steps involving SonarQube (example YAML below):

trigger: - master # or the name of the main branch - feature/*

steps:

- task: SonarQubePrepare@5 inputs: SonarQube: 'YourSonarqubeServerEndpoint' scannerMode: 'Other' extraProperties: 'sonar.projectKey=YourProjectKey'

- task: SonarQubePublish@5 inputs: pollingTimeoutSec: '300'