Pipeline Run Successful But Results not Visible

[mlaraibkhan]

I ran this tool in my pipeline and have two methods to visualize results however none of them worked.

• Published Artifacts:

• Using SARIF SAST Scans Tab -- Nothing to see (sc attached)

• Connecting Microsoft Defender for Cloud | DevOps security (preview) Azure Repos -- No visibility there as well.

Any suggestions?

[chrisnielsen-MS]

Hello @mlaraibkhan, thank you for raising this support issue. Unfortunately, the Scans tab is not owned by Defender for DevOps and is a Microsoft DevLabs product. Our recommendation is to follow up with the Microsoft DevLabs team by providing direct feedback via the Azure DevOps Marketplace here: https://marketplace.visualstudio.com/items?itemName=sariftools.scans&ssr=false#qna

[chrisnielsen-MS]

Hi @mlaraibkhan, Can you also confirm that the msdo.sarif file in your artifacts has any results in it? It may be that you are not seeing any results because the tools did not find any problems in your repositories.

[mlaraibkhan]

Hey,

I ran the test on a sample repository where I did find some issues, here's the sc, which indicates I have a few findings in msdo.sarif file.

[cajohanikea]

@chrisnielsen-MS I also have the same issue in one of our pipelines, the artifact uploaded includes the correct file but not visible. If I create a " - task: PublishBuildArtifacts@1" the file is visible in the Scans section.

[chrisnielsen-MS]

Thank you for confirming @mlaraibkhan and thank you for the suggestion @cajohanikea -- @mlaraibkhan can you try adding the publish task and see if it shows up for you? If that still doesn't do it, I think following up with the Microsoft DevLabs team via my earlier link will be the best path forward.