azure-audit.yml

# Copyright (C) 2019 Knot.x Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

schedules:
  - cron: "0 0 * * *"
    displayName: Daily Knot.x audit from main
    branches:
      include:
        - master
    # running even when there are no code changes - we check the Knot.x dependencies vulnerabilities
    always: true

pool:
  vmImage: 'ubuntu-latest'

variables:
  workspaceDir: knotx-repos

steps:
  - script: |
      git clone https://github.com/Knotx/knotx-aggregator.git
      mkdir $(workspaceDir)
    displayName: "Prepare Aggregator"
  - task: CmdLine@2
    inputs:
      script: |
        cd knotx-aggregator/development
        ./pull-all.sh -r ../../$(workspaceDir) -b master -a
    displayName: "Clone all repositories"
  - task: Gradle@3
    inputs:
      gradleWrapperFile: '$(workspaceDir)/knotx-stack/gradlew'
      workingDirectory: '$(workspaceDir)/knotx-stack'
      tasks: 'check -Paudit.enabled --info'
    displayName: "Check new vulnerabilities"