Allow Direct Path Specification for Bicep Files in MicrosoftSecurityDevOps@1 Task

I am using the MicrosoftSecurityDevOps@1 task in my Azure pipeline to scan Infrastructure as Code (IaC) files. My repository contains multiple Bicep modules, each located in their own subfolders. Here is a snippet of my pipeline configuration:
parameters:

• name: serviceConnection
  type: string
• name: resourceGroup
  type: string
• name: bicepFile
  type: string
• name: parametersFile
  type: string

jobs:

• job:
  displayName: "Scan IaC Templates"
  pool:
  vmImage: windows-latest
  steps:
  • checkout: azure.infra.bicep
  • task: MicrosoftSecurityDevOps@1
    displayName: MSDO IAC
    inputs:
    categories: 'IaC'

The folder structure of my repository is as follows:
repo_name/
└── modules/
└── module-name/
└── module-name.bicep

Issue: Currently, there is no option to specify a direct path to a specific Bicep file within the MicrosoftSecurityDevOps@1 task. As a result, the tool attempts to scan absolutely all files being checked out, while I need to scan only the Bicep file specified in my parameters. This limitation makes it challenging to target individual Bicep files for scanning in repositories with complex structures and multiple modules.

Proposal: Introduce an option to specify a direct path to a specific Bicep file in the MicrosoftSecurityDevOps@1 task. This feature would allow for more targeted scanning of individual Bicep files.

Commencez par la gestion des entrées de la tâche MicrosoftSecurityDevOps@1 et son point d’entrée d’analyse IaC/Bicep. Suivez la manière dont les fichiers extraits sont sélectionnés, puis définissez l’entrée de chemin direct demandée à l’aide du paramètre bicepFile du pipeline. Le travail est terminé lorsque la tâche peut analyser un seul fichier Bicep spécifié sans analyser les autres fichiers extraits.