Tool run time: 11.1929338 seconds
------------------------------------------------------------------------------
Checkov completed with exit code 1
##[error]Error running checkov job: 1 of 1
##[error]GuardianErrorExitCodeException: checkov completed with an Error exit code: 1. An error has occurred running the Checkov tool.
------------------------------------------------------------------------------
Process:
Convert:
Converting any raw tool logs to Sarif format ...
Completed converting raw tool logs to Sarif format.
Import:
No tool logs to process.
Break:
Guardian is searching for results that meet the given criteria to break the build.
Results Query Summary:
Baselines: default
Suppression Sets: default
Policy: azuredevops
Saved file /home/vsts/work/1/a/.gdn/msdo.sarif
Found no breaking results.
Active results: 0
Skipped results: 0
```ps
Tool run time: 11.1929338 seconds
------------------------------------------------------------------------------
Checkov completed with exit code 1
##[error]Error running checkov job: 1 of 1
##[error]GuardianErrorExitCodeException: checkov completed with an Error exit code: 1. An error has occurred running the Checkov tool.
------------------------------------------------------------------------------
Process:
Convert:
Converting any raw tool logs to Sarif format ...
Completed converting raw tool logs to Sarif format.
Import:
No tool logs to process.
Break:
Guardian is searching for results that meet the given criteria to break the build.
Results Query Summary:
Baselines: default
Suppression Sets: default
Policy: azuredevops
Saved file /home/vsts/work/1/a/.gdn/msdo.sarif
Found no breaking results.
Active results: 0
Skipped results: 0
Baselined results: 0
Suppressed results: 0
Results excluded by tool filters: 0
Results below minimum severity: 0
Results classified as Pass: 0
Results in flight: 0
##[error]Error running tool 1 of 1: checkov
##[error]Error running checkov job: 1 of 1
##[error]GuardianErrorExitCodeException: checkov completed with an Error exit code: 1. An error has occurred running the Checkov tool.
##[error]BreakException: Guardian detected one or more breaking results.
Hello All!
When i use almost vanilla
MicrosoftSecurityDevOps@1
template:Inside pipeline:
in the end, i got an error:
My config file is really basic:
Even when i set
DownloadExternalModules
tofalse
, i got an error in cmd:That error is hilarious since flag is set to
false
but leave that...The problem that i have is that i have a lot of errors from that pipeline:![image](https://github.com/microsoft/security-devops-azdevops/assets/37336963/3efad6ee-ad23-4881-86e6-55bb07d99d76)
For better reference, output with env variable set to
DEBUG
: https://gist.github.com/michasacuer/c0e7127bfe537f1a15e19db5fcd8fa81And also,
sarif
file is empty. This is an output from my code:And
scans
tab in devops is empty.When i don't use![image](https://github.com/microsoft/security-devops-azdevops/assets/37336963/ec364539-d069-4430-bf03-ed2c30dce600)
config
file i got an output frommsdo.safir
file andscans
tab has entries:But task looks like this:
And still i got this error:![image](https://github.com/microsoft/security-devops-azdevops/assets/37336963/7b0a1556-b5af-48ed-aa5f-33d7cfa23eda)
And output:
So, to sum up:
config
scans outputs are not saved to filefalse
checkov yells thatdownload modules
var is requiredWhy it fails? What i do wrong?