azure-pipelines: Ignore .vscode-test directory in CG scans (#1824)

microsoft · Nov 25, 2024 · a1a4fa9 · a1a4fa9
1 parent ad1b1ea
commit a1a4fa9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
@@ -47,6 +47,8 @@ extends:
     sdl:
       credscan:
         suppressionsFile: $(Build.SourcesDirectory)\.azure-pipelines\compliance\CredScanSuppressions.json
+      componentgovernance:
+        ignoreDirectories: $(Build.SourcesDirectory)\**\.vscode-test
     pool:
       name: VSEngSS-MicroBuild2022-1ES # Name of your hosted pool
       image: server2022-microbuildVS2022-1es # Name of the image in your pool. If not specified, first image of the pool is used

diff --git a/azure-pipelines/1esmain.yml b/azure-pipelines/1esmain.yml
@@ -32,6 +32,8 @@ extends:
         suppressionFile: $(Build.SourcesDirectory)\.config\guardian\.gdnsuppress
       credscan:
         suppressionsFile: $(Build.SourcesDirectory)\.azure-pipelines\compliance\CredScanSuppressions.json
+      componentgovernance:
+        ignoreDirectories: $(Build.SourcesDirectory)\.vscode-test
       # codeql:
       #   enabled: true # TODO: would like to enable only on scheduled builds but CodeQL cannot currently be disabled per https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/1es-codeql
     pool: