azure-pipelines-1.yml

# Node.js
# Build a general Node.js project with npm.
# Add steps that analyze code, save build artifacts, deploy, and more:
# https://docs.microsoft.com/azure/devops/pipelines/languages/javascript

trigger:
- master

name: $(TeamProject)_$(Build.DefinitionName)_$(SourceBranchName)_$(Date:yyyyMMdd)$(Rev:.r)

pool:
  vmImage: 'ubuntu-latest'

resources:
  containers:
  - container: 'iast_agent_server'
    image: 'veracode/iast-agent-server:latest'
    ports:
    - 10010:10010
    env:
      VERACODE_API_KEY_ID: $(veracode_api_key_id)
      VERACODE_API_KEY_SECRET: $(veracode_api_key_secret)

services:
  iast_agent_server: iast_agent_server

steps:
  - task: Bash@3
    displayName: 'Initialize IAST'
    inputs:
      targetType: 'inline'
      script: |

        # Wait for Agent Server to start up.
        status_code=000
        while [ $status_code -eq 000 ]
        do
          status_code=`curl --write-out "%{http_code}" --silent --output /dev/null --insecure $(AGENT_SERVER_URL)`
        done
        echo Agent Server status: $status_code

        # Set the BUILD_TAG.
        export BUILD_TAG='$(Build.BuildNumber)'
        echo Using BUILD_TAG: $BUILD_TAG

        # Allocate a session_id
        SESSION_ID=`curl -H "Content-Type:application/json" -H "x-iast-event:session_start" --silent --insecure -X POST -d "{\"BUILD_TAG\":\"${BUILD_TAG}\"}" ${AGENT_SERVER_URL}/events | jq -r '.session_id'`
        echo Using session_id: $SESSION_ID

        # Download the IAST Agent files.
        # curl --silent --output /dev/null --insecure ${AGENT_SERVER_URL}/downloads | sh
        curl --silent --insecure ${AGENT_SERVER_URL}/downloads | sh
        ls -la

  - task: NodeTool@0
    displayName: 'Install Node.js'
    inputs:
      versionSpec: '8.x'
    
  - task: Npm@1
    displayName: 'Build'
    inputs:
      command: 'install'
    
  - task: Npm@1
    displayName: 'Test'
    inputs:
      command: 'custom'
      customCommand: 'run test-iast'

  - task: Bash@3
    displayName: 'Get IAST Results'
    inputs:
      targetType: 'inline'
      script: |
        curl -H "Accept:text/plain" --silent --insecure -X GET $(AGENT_SERVER_URL)/results?session_id=${SESSION_ID}