Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support AzSKARMTemplateChecker task on Ubuntu agent #1069

Open
warner-aemo opened this issue Jun 17, 2020 · 1 comment
Open

Support AzSKARMTemplateChecker task on Ubuntu agent #1069

warner-aemo opened this issue Jun 17, 2020 · 1 comment
Assignees

Comments

@warner-aemo
Copy link

warner-aemo commented Jun 17, 2020

Title

Support AzSKARMTemplateChecker task on Ubuntu agent

Description

The Secure DevOps Kit (AzSK) CICD Extensions for Azure documentation does not explicitly require that it is run on a Windows agent, however attempting to run on ubuntu-latest results in an error.

We have been able to manually run the Get-AzSKARMTemplateSecurityStatus cmdlet on ubuntu-latest so I'm not sure why the extension is Windows only.

Steps to reproduce

Create a AzSKARMTemplateChecker to run on a ubuntu agent (microsoft-hosted)

stages:
- stage: Build
  jobs:
  - job: Check
    pool:
      vmImage: 'ubuntu-latest'
    steps:
       - task: AzSKARMTemplateChecker@4
         inputs:
           ARMTemplateFilePath: 'arm-templates/cosmosdb.json'
           ARMTemplateParameterFilePath: 'arm-templates/cosmosdb-params.json'
           Recurse: false

Expected behavior

Expected the task to run successfully.

Actual behavior

2020-06-05T07:10:37.0356854Z ##[section]Starting: AzSKARMTemplateChecker
2020-06-05T07:10:37.0364519Z ==============================================================================
2020-06-05T07:10:37.0364898Z Task         : AzSK ARM Template Checker
2020-06-05T07:10:37.0365221Z Description  : Scan ARM templates for security issues using AzSK.
2020-06-05T07:10:37.0365516Z Version      : 4.0.3
2020-06-05T07:10:37.0365761Z Author       : Microsoft Corporation
2020-06-05T07:10:37.0366105Z Help         : [More Information](http://aka.ms/azskossdocs)
2020-06-05T07:10:37.0366467Z ==============================================================================
2020-06-05T07:10:37.0517333Z ##[error]The current operating system is not capable of running this task. That typically means the task was written for Windows only. For example, written for Windows Desktop PowerShell.
2020-06-05T07:10:37.0531160Z ##[section]Finishing: AzSKARMTemplateChecker
@MichaelGuiney-BE
Copy link

MichaelGuiney-BE commented Oct 11, 2020

Agree. It would be great if linux agents were supported for CI/CD pipelines.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants