Running Scans Using the YAML Pipeline
To run a scan using a YAML file, you must create a SAST building task and add a YAML file.
Click
Pipelines. You are invited to create your first pipeline for the new project.Click <Create Pipeline>. You are asked to specify where your code is hosted.
Select the platform where your code is hosted, such as
GitHub. You are asked to select the repository that contains the YAML file.
Select the desired repository from the list. Depending on your requirements you may select Starter Pipeline
or Existing Azure Pipelines YAML .
Click
to download the YAML file . You can edit, add desired features, and then upload it to the pipeline.