azsk / ADOScanner-docs

Welcome to the documentation of ADO Security Scanner!
MIT License
64 stars 14 forks source link

400 Bad request: Sending scan report to extension storage #70

Closed llopezalonso closed 2 years ago

llopezalonso commented 2 years ago

Hi,

My name is Luis and I’m testing ADO Security Scanner on a cloud ADO instance with an Azure Pipelines agent windows-2019.

I’m only experiencing the issue when the analysis is for all the resources, the analysis for Organization and Projects looks great.

When I try to run the analysis, I’ve checked all the resources to be scanned vía * (I’ve a total of 141 resources). The scan seems to be terminated (a total of 1880 issues are detected), but the error comes when sending scan to extension storage.

Could you help me??

================================================================================ AzSK.ADO Version: 1.17.0

Method Name: Get-AzSKADOSecurityStatus (gads) Input Parameters: Name Alias Value


OrganizationName oz CONFIDENTIAL
DoNotOpenOutputFolder dnof True
PATToken tk System.Security.SecureString
ProjectNames pn CONFIDENTIAL (ONLY ONE) BuildNames bn
ReleaseNames rn

ServiceConnectionNames sc
AgentPoolNames ap

ResourceTypeName rtn Build_Release_SvcConn_AgentPool_VarGroup_User_CommonSVTResources VariableGroupNames vg
RepoNames rp

SecureFileNames sf
FeedNames fd

EnvironmentNames en *


Status and detailed logs have been exported to path - C:\Users\VssAdministrator\AppData\Local\Microsoft\AzSK.ADOLogs\Org_CONFIDENTIAL\20220824_104837_gads_Build_Release_SvcConn_AgentPool_VarGroup_User_CommonSVTResources ================================================================================ Sending scan report to extension storage Scan result will be save with id: CONFIDENTIAL_BuildId_500_24-08-2022-10-50-53 {"$id":"1","innerException":null,"message":"Value cannot be null.\r\nParameter name: document","typeName":"System.ArgumentNullException, mscorlib","typeKey":"ArgumentNullException","errorCode":0,"eventId":0} Cleaning logs from temp directory...

[error]The remote server returned an error: (400) Bad Request.

Thanks for you time and support Best regards

llopezalonso commented 2 years ago

The error is due to accents and special characters on pipelines/serviceconections.

Ton of thanks for your support team Security Scanner for ADO Support!!!