diff --git a/eng/common/pipelines/templates/steps/credscan.yml b/eng/common/pipelines/templates/steps/credscan.yml index 202888e76..3f61883b6 100644 --- a/eng/common/pipelines/templates/steps/credscan.yml +++ b/eng/common/pipelines/templates/steps/credscan.yml @@ -25,15 +25,20 @@ steps: if(Test-Path "${{ parameters.SourceDirectory }}/credscan.tsv") { Get-Content "${{ parameters.SourceDirectory }}/credscan.tsv" } + else { + Write-Host "##vso[task.setvariable variable=SKIP_CREDSCAN]true" + } displayName: CredScan setup - task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@3 displayName: CredScan running + condition: and(succeededOrFailed(), ne('SKIP_CREDSCAN', true)) inputs: toolVersion: 2.2.7.8 scanFolder: "${{ parameters.SourceDirectory }}/credscan.tsv" suppressionsFile: ${{ parameters.SuppressionFilePath }} - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@2 displayName: CredScan result analysis + condition: and(succeededOrFailed(), ne('SKIP_CREDSCAN', true)) inputs: GdnBreakBaselineFiles: ${{ parameters.BaselineFilePath }} GdnBreakAllTools: false @@ -43,8 +48,7 @@ steps: # Used for generating baseline file. # GdnBreakOutputBaselineFile: baseline # GdnBreakOutputBaseline: baseline - condition: succeededOrFailed() - pwsh: | Write-Host "Please check https://aka.ms/azsdk/credscan for more information about the cred scan failure." displayName: CredScan troubleshooting guide - condition: failed() + condition: and(failed(), ne('SKIP_CREDSCAN', true))