microsoft / microsoft/react-native-windows
Add APIScan task to the CI/PR pipelines
Open
Nobody has claimed this yet.
Area: Compliance
enhancement
Partner: Microsoft
Workstream: ES Compliance SFI
- Dominant language
- C++
- Stars
- 17.3k
- Forks
- 1.2k
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 33
Description
Summary
There's a securedevelopmentteam.vss-secure-development-tools.build-task-apiscan.APIScan@2 task we could be running. Some internal customers need the official binaries to be "vulcan ready"
Motivation
To be in compliance.
Basic Example
No response
Open Questions
Why is basically no one else in Microsoft OSS running this if it's a requirement?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the CI/PR pipeline definitions and review how existing security or compliance tasks are configured. Check the APIScan@2 task requirements and whether it applies to the official binaries. Done means the task runs in the relevant pipelines and the compliance requirement is verified.
Written by the indexing model from the issue text.
Assessment
- Domain
- ci-cd, devops, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100