DevSecOps

Structure of the directory

  • CredScan/jobs: This directory contains the CI pipeline job templates. These are broken into the Build and Test and Credential Scanning jobs.
  • CredScan/searchers: This directory contains the definition of the custom searchers for MSCA Credential Scan tool.
  • CredScan/scan-rules: This directory contains the definition of the regex rules used by the truffleHog and Credential Digger Credential Scan tool.
  • CredScan/src: The source code used as an example for credential scanning. The code intentionally contains issues to highlight the credential scanning capabilities.
  • azure-pipelines.yml: The main CI pipeline definition with all tools combined.
  • azure-pipelines-msca.yml: The main CI pipeline definition for using MSCA Cred Scan tool.
  • azure-pipelines-truffleHog.yml: The main CI pipeline definition for using truffleHog Credential Scan tool.
  • azure-pipelines-credential-digger.yml: The main CI pipeline definition for using Credential Digger Credential Scan tool.