How to get it
The extension is published in the Microsoft Visual Studio Marketplace. You can install it in your Visual Studio Team Services account directly from there, or download it to install it in your TFS server 2017 (15.0.*) or higher.
Info | ||
---|---|---|
| ||
The minimum TFS version supported is 2015 Update 2 (14.95.25122.0). For TFS 2015 you need an ad-hoc version (2.2015.*) of the extensión that is not published in the Visual Studio Marketplace. You can directly download a zip file with the vsix file from kiuwan.com. |
What you need to know before installing it
...
...
...
...
...
...
...
...
...
What you get with the extension
A service endpoint type and 2 build tasks. One to run Kiuwan baseline analyses to analyse your releases. And one to run Kiuwan delivery analyses for your change or pull requests.
...
...
...
...
...
...
...
...
...
...
Build Tasks
The extension adds 2 new build task to your TFS/VSTS Task Catalogue in the Build category. While editing a build definition, click "Add build step" to open the catalogue and look for the Kiuwan tasks.
Select the one you want to use and configure it.
Kiuwan credentials for your build tasks
In both build tasks, you have to select a Kiuwan connection previously configured in the project service endpoints configuration (see above). The credentials configured in the selected Kiuwan connection will be used to run the analysis.
For backward compatibility, if you don't configure the Kiuwan connection in the task, the build definition variables: KiuwanUser and KiuwanPasswd, will be use for credentials. These variables can be used as well to override the Kiuwan connection credentials. This can be useful if you want a particular build definition to run analyses with a different user.
Kiuwan Baseline Analysis Task
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
Security analysis performance
When running security analyses only, you can improve the performance by skipping some analysis steps such as:
- Duplication of code detection that is not relevant for security
- Architecture analysis. If you have the architecture product available in your Kiuwan account you can skip the architecture analysis as well. The default is to skip it always.
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...
...