From ad41ff262b638944a4f5da2d60838183182918bf Mon Sep 17 00:00:00 2001 From: Parth Sharma <86726240+parth-deepsource@users.noreply.github.com> Date: Wed, 31 Jan 2024 17:17:31 +0530 Subject: [PATCH] feat: add azure CI snippet for dart-analyze (#20) --- analyzers/dart-analyze/CI/azure.yaml | 39 ++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 analyzers/dart-analyze/CI/azure.yaml diff --git a/analyzers/dart-analyze/CI/azure.yaml b/analyzers/dart-analyze/CI/azure.yaml new file mode 100644 index 0000000..412cd26 --- /dev/null +++ b/analyzers/dart-analyze/CI/azure.yaml @@ -0,0 +1,39 @@ +trigger: + - "*" + +pool: + vmImage: "ubuntu-latest" + +stages: + - stage: scan_and_report + jobs: + - job: scan_and_report + displayName: "Scan and Report" + steps: + - script: | + sudo apt-get update + sudo apt-get install apt-transport-https + wget -qO- https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo gpg --dearmor -o /usr/share/keyrings/dart.gpg + echo 'deb [signed-by=/usr/share/keyrings/dart.gpg arch=amd64] https://storage.googleapis.com/download.dartlang.org/linux/debian stable main' | sudo tee /etc/apt/sources.list.d/dart_stable.list + sudo apt-get update + sudo apt-get install -y dart + displayName: "Setup Dart" + + - checkout: self + displayName: "Code checkout" + + - script: | + dart analyze > dart_analyze.txt || true + displayName: "Run dart analyze" + + - script: | + curl -sSL https://raw.githubusercontent.com/advanced-security/dart-analyzer-sarif/main/dart_analyzer_sarif.py > dart-analyzer-sarif + python3 dart-analyzer-sarif dart_analyze.txt dart_analyze.sarif $(Build.Repository.LocalPath) --repo-uri $(Build.Repository.Uri) --branch $(Build.SourceBranchName) --revision-id $(Build.SourceVersion) + displayName: "Dart analyze to SARIF" + + - script: | + curl -sSL https://deepsource.io/cli | sh + ./bin/deepsource report --analyzer dart-analyze --analyzer-type community --value-file ./dart_analyze.sarif + displayName: "Report to DeepSource" + env: + DEEPSOURCE_DSN: $(DEEPSOURCE_DSN)