search

microsoft / security-devops-azdevops

Microsoft Security DevOps extension for Azure DevOps.
MIT License
63 stars 17 forks source link

task CredScan@2 Microsoft.Security.CredScan broken #97

Closed quasarea closed 7 months ago

quasarea commented 7 months ago

Since morning we are observing issue with Microsoft CredScan task

Unfortunately task documentation has no link to any repo, only https://learn.microsoft.com/en-us/previous-versions/azure/security/develop/security-code-analysis-overview, perhaps article author @TerryLanfear could help?

Starting: CredScan
==============================================================================
Task         : Credential Scanner
Description  : Scan source code for committed credentials
Version      : 2.336.0
Author       : Microsoft Corporation
Help         : [Extension Docs](https://aka.ms/mscadocs)
==============================================================================
Enabling TLS 1.2...
Initializing analysis environment...
Downloaded nuget.exe: D:\a\_sdt\nuget.exe
"D:\a\_sdt\nuget.exe" install Microsoft.Security.CredScan -Source https://pkgs.dev.azure.com/secdevtools/_packaging/SecDevTools/nuget/v3/index.json -ConfigFile D:\a\_sdt\dt.nuget.config -NonInteractive
Feeds used:
  https://pkgs.dev.azure.com/secdevtools/_packaging/SecDevTools/nuget/v3/index.json

Installing package 'Microsoft.Security.CredScan' to 'D:\a\_sdt'.
Using credentials from config. UserName: VssSessionToken
Unable to load the service index for source https://pkgs.dev.azure.com/secdevtools/_packaging/SecDevTools/nuget/v3/index.json.
  Response status code does not indicate success: 401 (Unauthorized).
charlesoxyer commented 7 months ago

Hello - MSCA is no longer supported and has been past end of life support since March 2022. Customers can gain support of our latest tooling through MSDO and GitHub Advanced Security for AzDO.