microsoft / security-devops-azdevops

Microsoft Security DevOps extension for Azure DevOps.
MIT License
63 stars 17 forks source link

Add support for Rule Exclusions for the Template Analyzer #77

Open mattcorr opened 1 year ago

mattcorr commented 1 year ago

Issue

Currently the configuration items for the Template Analyzer through this app are defined here.

There is no way to add rule exclusions. This is useful in the case where some of the rules might not apply and we don't want them to fail the pipeline.

On the Template Analyzer application directly it does have support for rule exclusions via a configuration file as documented here.

Suggestion

Include a way to define rule exclusions that can be passed to the template analyzer app. Alternatively provide a way to provide a configuration file to the app (this will make the tool much more flexible).

Xieyan commented 1 month ago

Hi Team, we also need support for rule exclusions in our team. This functionality is essential for cases where specific rules may not apply, and we want to prevent them from failing the pipeline. Including an option to define rule exclusions or providing a way to supply a configuration file to the Template Analyzer app would greatly enhance the tool's flexibility and usability for us as well.