assembly-module-compliance.yml

parameters:
  # apiscan
  softwareFolder: ''
  softwareName: ''
  softwareVersion: ''
  # binskim
  AnalyzeTarget: ''
  AnalyzeSymPath: 'SRV*'
  # component-governance
  sourceScanPath: '$(Build.SourcesDirectory)'
  # credscan
  suppressionsFile: ''
  # TermCheck
  optionsRulesDBPath: ''
  optionsFTPath: ''
  # tsa-upload
  codeBaseName: ''
  # selections
  APIScan: true # set to false when not using Windows APIs.

steps:
- template: template-compliance/apiscan.yml
  parameters:
    softwareFolder: ${{ parameters.softwareFolder }}
    softwareName: ${{ parameters.softwareName }}
    softwareVersion: ${{ parameters.softwareVersion }}
    APIScanEnable: ${{ parameters.APIScan }}

- template: template-compliance/auto-applicability.yml

- template: template-compliance/binskim.yml
  parameters:
    AnalyzeTarget: ${{ parameters.AnalyzeTarget }}
    AnalyzeSymPath: ${{ parameters.AnalyzeSymPath }}

- template: template-compliance/component-governance.yml
  parameters:
    sourceScanPath: ${{ parameters.sourceScanPath }}

- template: template-compliance/credscan.yml
  parameters:
    suppressionsFile: ${{ parameters.suppressionsFile }}

- template: template-compliance/defender.yml

- template: template-compliance/TermCheck.yml
  parameters:
    optionsRulesDBPath: ${{ parameters.optionsRulesDBPath }}
    optionsFTPath: ${{ parameters.optionsFTPath }}

- template: template-compliance/vulnerability-assessment.yml

- template: template-compliance/publish-security-logs.yml

- template: template-compliance/tsa-upload.yml
  parameters:
    codeBaseName: ${{ parameters.codeBaseName }}

- template: template-compliance/sdtreport.yml
  parameters:
    APIScan: ${{ parameters.APIScan }}
    BinSkim: true
    CredScan: true
    TermCheck: true