microsoft / security-devops-azdevops

Microsoft Security DevOps extension for Azure DevOps.
MIT License
60 stars 16 forks source link

Scan a specific path #16

Closed pim-simons closed 1 year ago

pim-simons commented 1 year ago

Currently the extension scans the entire git repo. It would be nice to be able to specify a specific path to scan as to not have to scan the entire repo on each pipeline run.

flytzen commented 1 year ago

Alternatively, to be able to exclude folders: ESLint, for example, finds warnings in the jQuery library and it would be helpful to be able to just exclude that folder or file.

chrisnielsen-MS commented 1 year ago

The tools often provide their own mechanism for exclusions. ESLint for example, can use an Exclusions File. You can see more information about configuring the tools using env variables in the wiki here: https://github.com/microsoft/security-devops-azdevops/wiki