microsoft / security-devops-azdevops

Microsoft Security DevOps extension for Azure DevOps.
MIT License
59 stars 14 forks source link

Path is undefined in release pipeline #66

Closed bain2236 closed 1 year ago

bain2236 commented 1 year ago

We use a release pipeline to bundle up several artefacts that we would like to scan here rather than in the build pipeline Received the following error

there is no path argument that I am able to specify

2023-07-12T12:59:12.5314019Z ##[section]Starting: Run Microsoft Defender for DevOps 2023-07-12T12:59:12.5419725Z ============================================================================== 2023-07-12T12:59:12.5419854Z Task : Microsoft Security DevOps 2023-07-12T12:59:12.5419919Z Description : Run the Microsoft Security DevOps CLI for static analysis. 2023-07-12T12:59:12.5420020Z Version : 1.7.2 2023-07-12T12:59:12.5420070Z Author : Microsoft Corporation 2023-07-12T12:59:12.5420133Z Help : Runs the [Microsoft Security DevOps CLI](https://aka.ms/msdo-nuget) for security analysis. 2023-07-12T12:59:12.5420233Z ============================================================================== 2023-07-12T12:59:12.7422939Z ##[error]TypeError [ERR_INVALID_ARG_TYPE]: The "path" argument must be of type string. Received undefined 2023-07-12T12:59:12.7431866Z ##[section]Finishing: Run Microsoft Defender for DevOps

bain2236 commented 1 year ago

having just found the wiki I suspect I need to setup some env vars. but it doesn't tell me which arg is required

JiandongJiang commented 1 year ago

AFAIK, it only supports scanning for build pipelines (for now) but not yet for release pipelines. If the wiki states that it has already supported release pipelines, please send us a link to the wiki you refer to and reactivate this issue.