chore: enable BinSkim on Linux (#278183)

This commit is contained in:
Raymond Zhao
2025-11-24 11:08:10 -08:00
committed by GitHub
parent 8cf3a2143b
commit 46d0e3c4ba
2 changed files with 4 additions and 2 deletions

View File

@@ -29,6 +29,10 @@ jobs:
NPM_ARCH: ${{ parameters.NPM_ARCH }} NPM_ARCH: ${{ parameters.NPM_ARCH }}
VSCODE_ARCH: ${{ parameters.VSCODE_ARCH }} VSCODE_ARCH: ${{ parameters.VSCODE_ARCH }}
templateContext: templateContext:
sdl:
binskim:
analyzeTargetGlob: '$(Agent.BuildDirectory)/VSCode-linux-$(VSCODE_ARCH)/**/*.node;$(Agent.BuildDirectory)/vscode-server-linux-$(VSCODE_ARCH)/**/*.node;$(Agent.BuildDirectory)/vscode-server-linux-$(VSCODE_ARCH)-web/**/*.node'
preReleaseVersion: '4.3.1'
outputParentDirectory: $(Build.ArtifactStagingDirectory)/out outputParentDirectory: $(Build.ArtifactStagingDirectory)/out
outputs: outputs:
- ${{ if or(eq(parameters.VSCODE_RUN_ELECTRON_TESTS, true), eq(parameters.VSCODE_RUN_BROWSER_TESTS, true), eq(parameters.VSCODE_RUN_REMOTE_TESTS, true)) }}: - ${{ if or(eq(parameters.VSCODE_RUN_ELECTRON_TESTS, true), eq(parameters.VSCODE_RUN_BROWSER_TESTS, true), eq(parameters.VSCODE_RUN_REMOTE_TESTS, true)) }}:

View File

@@ -53,8 +53,6 @@ extends:
tsa: tsa:
enabled: true enabled: true
configFile: $(Build.SourcesDirectory)/build/azure-pipelines/config/tsaoptions.json configFile: $(Build.SourcesDirectory)/build/azure-pipelines/config/tsaoptions.json
binskim:
analyzeTargetGlob: '+:file|$(Agent.BuildDirectory)/VSCode-*/**/*.exe;+:file|$(Agent.BuildDirectory)/VSCode-*/**/*.node;+:file|$(Agent.BuildDirectory)/VSCode-*/**/*.dll;-:file|$(Build.SourcesDirectory)/.build/**/system-setup/VSCodeSetup*.exe;-:file|$(Build.SourcesDirectory)/.build/**/user-setup/VSCodeUserSetup*.exe'
codeql: codeql:
runSourceLanguagesInSourceAnalysis: true runSourceLanguagesInSourceAnalysis: true
compiled: compiled: