microsoft / microsoft/security-devops-azdevops
Add support for Rule Exclusions for the Template Analyzer
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 86
- Forks
- 22
- PR merge metrics
- No merged PRs in 30d
Description
Issue
Currently the configuration items for the Template Analyzer through this app are defined here.
There is no way to add rule exclusions. This is useful in the case where some of the rules might not apply and we don't want them to fail the pipeline.
On the Template Analyzer application directly it does have support for rule exclusions via a configuration file as documented here.
Suggestion
Include a way to define rule exclusions that can be passed to the template analyzer app. Alternatively provide a way to provide a configuration file to the app (this will make the tool much more flexible).
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the Template Analyzer configuration items in the linked Security DevOps wiki and the Template Analyzer documentation on customizing evaluation outputs. Determine how this extension currently passes configuration to the analyzer; the work is done when users can provide rule exclusions or a configuration file and excluded rules no longer fail the pipeline.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100