Running Scans using the YAML Pipeline
To run a scan using a YAML file, you have to create a SAST building task and add a YAML file to it.
Click
Pipelines. You are invited to create your first pipeline for the new project.Click <Create Pipeline>. You are asked to specify where your code is hosted.
Select the platform where your code is hosted, for example
GitHub. You are asked to select the repository that contains the YAML file.
Select the desired repository from the list. You may select Starter Pipeline
or Existing Azure Pipelines YAML , depending on your requirements.
Click
to download the YAML file . You can edit, add desired features, and then upload it to the pipeline.