Azure DevOps Plugin: Diggity

Introduction

Diggity BOM Diggity is an open-source tool developed to streamline the critical process of generating a comprehensive Software Bill of Materials (SBOM) for Container Images and File Systems across various supported ecosystems.mitigation measures.

Task Usage

Docker image scan example

- task: Diggity@1
  inputs:
    scanType: 'image'
    scanName: 'ubuntu:latest'
    failCriteria: 'medium'
    skipBuildFail: 'false'

Prerequisites

Docker Plugin for image pulling.

Inputs Description

Input Name	Description
scanType *	Select Scan Type: image, tar, or directory.
scanName *	Input image name `image:tag`, tar file path, or directory path.
failCriteria *	Input a severity that will be found at or above given severity([unknown negligible low medium high critical]). Default: `medium`.
skipBuildFail *	Default as false. Skip build to fail based on the assessment.

* = required inputs.

Output Description

Table	Description
SBOM Scan	Show list of packages found.
Assessment	Based on fail-criteria exposed secrets. Pass-Fail Assessment.

Pipeline

trigger:
- main

pool:
  vmImage: ubuntu-latest

steps:
- task: Diggity@1
  inputs:
    scanType: 'directory'           // Select Scan Type, image, directory, tar, or sbom.
    scanName: '.'                   // Input Image name, Directory path, tar file path.
    failCriteria: 'medium'          // Select a threshold that will fail the build when equal to or above the severity found in the results. 
                                    // Select Severity, critical, high, medium, low, negligible, unknown.
    skipBuildFail: 'false'          // Default as false. Skip build to fail based on the assessment.

Support

To help with this task extension, or have an issue or feature request, please contact: eng@carbonetes.com

If reporting an issue, please include:

the version of the task extension
relevant logs and error messages
steps to reproduce

License and Copyright

Licensed under MIT License.

Diggity

Carbonetes