azure-pipelines.yml

# Python package
# Create and test a Python package on multiple Python versions.
# Add steps that analyze code, save the dist with the build record, publish to a PyPI-compatible index, and more:
# https://docs.microsoft.com/azure/devops/pipelines/languages/python

trigger:
- master

schedules:
- cron: "0 21-22 * * 0"
  displayName: Weekly build
  branches:
    include:
    - master
  always: true

pool:
  vmImage: ubuntu-latest
strategy:
  matrix:
#    Python27:
#      python.version: '2.7'
#    Python35:
#      python.version: '3.5'
#    Python36:
#      python.version: '3.6'
    Python37:
      python.version: '3.7'

steps:
- task: UsePythonVersion@0
  inputs:
    versionSpec: '$(python.version)'
  displayName: 'Use Python $(python.version)'

- script: |
    python -m pip install --upgrade pip
    pip install -r requirements.txt
  displayName: 'Install dependencies'

- task: CmdLine@2
  inputs:
    script: 'curl -sSL https://www.sourceclear.com/install | sh'
- task: CmdLine@2
  inputs:
    script: 'srcclr scan .'
  env:
    SRCCLR_API_TOKEN: $(SRCCLR_API_TOKEN)

- task: CmdLine@2
  inputs:
    script: 'zip -r stackify-api-python.zip stackify/ requirements.txt setup.py'
- task: Veracode@3
  inputs:
    ConnectionDetailsSelection: 'Endpoint'
    AnalysisService: 'Veracode'
    veracodeAppProfile: 'Retrace Python Library'
    version: 'AZ-Devops-Build-$(build.buildNumber)'
    filepath: 'stackify-api-python.zip'
    maximumWaitTime: '360'
    optargs: -deleteincompletescan 2