diff --git a/.infracost/pricing.gob b/.infracost/pricing.gob new file mode 100644 index 0000000..ec3ba93 Binary files /dev/null and b/.infracost/pricing.gob differ diff --git a/.infracost/terraform_modules/manifest-5d29489f6f7a45915b79efb29123cd41.json b/.infracost/terraform_modules/manifest-5d29489f6f7a45915b79efb29123cd41.json new file mode 100644 index 0000000..dee00ba --- /dev/null +++ b/.infracost/terraform_modules/manifest-5d29489f6f7a45915b79efb29123cd41.json @@ -0,0 +1 @@ +{"Path":"c:\\Users\\adine\\Documents\\GitHub\\DevSecOps\\Infrastructure-Source-Code\\terraform\\azure","Version":"2.0","Modules":[]} \ No newline at end of file diff --git a/.infracost/terraform_modules/manifest-68604c74925e3cd376706b68c5069ff7.json b/.infracost/terraform_modules/manifest-68604c74925e3cd376706b68c5069ff7.json new file mode 100644 index 0000000..1f1685f --- /dev/null +++ b/.infracost/terraform_modules/manifest-68604c74925e3cd376706b68c5069ff7.json @@ -0,0 +1 @@ +{"Path":"c:\\Users\\adine\\Documents\\GitHub\\DevSecOps\\Infrastructure-Source-Code\\terraform\\aws","Version":"2.0","Modules":[]} \ No newline at end of file diff --git a/.infracost/terraform_modules/manifest-c4c06f4f8365ff270ffb811063d1a0cb.json b/.infracost/terraform_modules/manifest-c4c06f4f8365ff270ffb811063d1a0cb.json new file mode 100644 index 0000000..2e2065c --- /dev/null +++ b/.infracost/terraform_modules/manifest-c4c06f4f8365ff270ffb811063d1a0cb.json @@ -0,0 +1 @@ +{"Path":"c:\\Users\\adine\\Documents\\GitHub\\DevSecOps\\Infrastructure-Source-Code\\terraform\\gcp","Version":"2.0","Modules":[]} \ No newline at end of file diff --git a/azure-pipelines/github-advanced-security.yml b/azure-pipelines/github-advanced-security.yml new file mode 100644 index 0000000..5f11cb0 --- /dev/null +++ b/azure-pipelines/github-advanced-security.yml @@ -0,0 +1,36 @@ +trigger: none +pr: none + +pool: + vmImage: 'ubuntu-latest' + +stages: +- stage: AdvancedSecurityScanning + displayName: Advanced Security Scanning + jobs: + - job: AdvancedSecurityScanning + displayName: Advanced Security Scanning + steps: + - task: AdvancedSecurity-Codeql-Init@1 + + - task: AdvancedSecurity-Codeql-Autobuild@1 + + - task: DotNetCoreCLI@2 + displayName: Build + inputs: + projects: "Application-Source-Code/**/*.csproj" + arguments: "--configuration $(BuildConfiguration)" + + - task: DotNetCoreCLI@2 + displayName: Restore + inputs: + command: "restore" + projects: "Application-Source-Code/**/*.csproj" + # feedsToUse: "config" + # nugetConfigPath: "nuget.config" + + - task: AdvancedSecurity-Dependency-Scanning@1 + + - task: AdvancedSecurity-Codeql-Analyze@1 + inputs: + querysuite: 'security-and-quality'