Update aggregate-report to use common credscan yml and update baselin…

…e file (Azure#23090)
rakshith91 · Apr 10, 2022 · b22db65 · b22db65
1 parent 7c345f1
commit b22db65
Show file tree

Hide file tree

Showing 2 changed files with 907 additions and 4,979 deletions.
diff --git a/eng/pipelines/aggregate-reports.yml b/eng/pipelines/aggregate-reports.yml
@@ -73,25 +73,9 @@ stages:
       - job: ComplianceTools
         timeoutInMinutes: 120
         steps:
-          - task: securedevelopmentteam.vss-secure-development-tools.build-task-credscan.CredScan@3
-            displayName: 'Run CredScan'
-            condition: succeededOrFailed()
-            inputs:
-              suppressionsFile: 'eng\CredScanSuppression.json'
-
-          - task: securedevelopmentteam.vss-secure-development-tools.build-task-postanalysis.PostAnalysis@2
-            displayName: 'Post Analysis'
-            condition: succeededOrFailed()
-            inputs:
-              GdnBreakAllTools: false
-              GdnBreakGdnToolCredScan: true
-              GdnBreakGdnToolCredScanSeverity: Error
-              GdnBreakBaselineFiles: $(Build.SourcesDirectory)\eng\python.gdnbaselines
-              GdnBreakBaselines: baseline
-              # Used for generating baseline file.
-              # GdnBreakOutputBaselineFile: python
-              # GdnBreakOutputBaseline: baseline
-            continueOnError: true
+          - template: /eng/common/pipelines/templates/steps/credscan.yml
+            parameters:
+              BaselineFilePath: $(Build.SourcesDirectory)\eng\python.gdnbaselines
 
           - pwsh: |
               azcopy copy "https://azuresdkartifacts.blob.core.windows.net/policheck/PythonPoliCheckExclusion.mdb?$(azuresdk-policheck-blob-SAS)" `