CISO ABNAMRO Azure DevOps extension

Introduction

This is the CISO ABNAMRO Azure DevOps extension.

It can be used in a pipeline that has the CBSP DevOps agent installed. For both Windows as Linux there is a product. It can install and remove the extension.

Future roadmap:

• Get the tenable.io linkingkey from a keyvault (used to link to tenable.io)
• Get the bearer authentication key from a keyvault (used to download the software)
• Override the agent group
• Implement mocha unit testing scripts
• Support for RHEL 8

Getting Started

Install Visual Studio code as described here.

For Azure DevOps extension development see here.

After the repository is cloned a new version can be made using the following commands:

1. Update the code
2. Update CISOTaskExtension\ProductTasks\TenableAgentLinux\V1\task.json with the right version
3. Update CISOTaskExtension\ProductTasks\TenableAgentWindows\V1\task.json with the right version
4. Update vss-extension.json with the right version
5. In directory CISOTaskExtension\ProductTasks\TenableAgentLinux\V1 run the command: tsc Bash.ts This will compile the Bash.ts into a Bash.js. See comments in Bash.js file on how to test it.
6. Run the command: tfx extension create in the main directory to have the vsix file.

Build and Test

In order to test the extension it is best to create your own organisation and deploy the extension.

When making a CBSP DevOps agent refer to that organization and deployment group to test it out.

TODO Publishing to the marketplace will be described later.

Usage documentation

The usage documentation can be found here.