Merge pull request #1 from davidknise/release/vNext

Release v1.7.0

Author: davidknise

CHANGELOG.md

@@ -3,6 +3,10 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/) and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## v1.7.0 - 02/23/2023
+### Added
+- Node16 launcher support
+
 ## v1.5.1 - 08/29/2022
 ### Changed
 - Updated the extension and MicrosoftSecurityDevOps build task icon

README.md

@@ -13,16 +13,11 @@ An extension for Azure DevOps that contributes a build task to run the [Microsof
 ## Dependencies
 
 * The `MicrosoftSecurityDevOps` build task depends on [.NET 6](https://dotnet.microsoft.com/en-us/download/dotnet/6.0).
-* The CredScan analyzer depends on [.NET 3.1](https://dotnet.microsoft.com/en-us/download/dotnet/3.1).
 
 Microsoft-hosted build agents ship with an included list of software. To see if your agent image comes with these pre-installed, [see here](https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops&tabs=yaml#software).
 
 To install these dependencies at runtime, run the following tasks before the `MicrosoftSecurityDevOps` task.
 ```yaml
-- task: UseDotNet@2
-  displayName: 'Use dotnet 3.1'
-  inputs:
-    version: 3.1.x
 - task: UseDotNet@2
   displayName: 'Use dotnet 6.0'
   inputs:
@@ -47,8 +42,8 @@ steps:
 | [BinSkim](https://github.com/Microsoft/binskim) | binary - Windows, ELF | [MIT License](https://github.com/microsoft/binskim/blob/main/LICENSE) |
 | CredScan | code, artifacts | - |
 | [ESlint](https://github.com/eslint/eslint) | JavaScript | [MIT License](https://github.com/eslint/eslint/blob/main/LICENSE) |
-| [Template Analyzer](https://github.com/Azure/template-analyzer) | Infrastructure-as-code (IaC), ARM templates | [MIT License](https://github.com/Azure/template-analyzer/blob/main/LICENSE.txt) |
-| [Terrascan](https://github.com/accurics/terrascan) | Infrastructure-as-Code (IaC), Terraform (HCL2), Kubernetes (JSON/YAML), Helm v3, Kustomize, Dockerfiles | [Apache License 2.0](https://github.com/accurics/terrascan/blob/master/LICENSE) |
+| [Template Analyzer](https://github.com/Azure/template-analyzer) | Infrastructure-as-code (IaC), ARM templates, Bicep files | [MIT License](https://github.com/Azure/template-analyzer/blob/main/LICENSE.txt) |
+| [Terrascan](https://github.com/accurics/terrascan) | Infrastructure-as-Code (IaC), Terraform (HCL2), Kubernetes (JSON/YAML), Helm v3, Kustomize, Dockerfiles, CloudFormation | [Apache License 2.0](https://github.com/accurics/terrascan/blob/master/LICENSE) |
 | [Trivy](https://github.com/aquasecurity/trivy) | Container Images, Infrastructure as Code (Iac) | [Apache License 2.0](https://github.com/aquasecurity/trivy/blob/main/LICENSE) |
 
 ## Contributing

src/MicrosoftSecurityDevOps/v1/task.json

@@ -11,7 +11,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 1,
-        "Minor": 6,
+        "Minor": 7,
         "Patch": 0
     },
     "preview": true,
@@ -98,6 +98,9 @@
     ],
     "instanceNameFormat": "Run Microsoft Defender for DevOps",
     "execution": {
+        "Node16": {
+            "target": "msdo.js"
+        },
         "Node10": {
             "target": "msdo.js"
         },

src/extension-manifest-debug.json

@@ -2,7 +2,7 @@
   "manifestVersion": 1,
   "id": "microsoft-security-devops-azdevops-debug",
   "name": "Microsoft Security DevOps (Debug)",
-  "version": "1.6.0.0",
+  "version": "1.7.0.0",
   "publisher": "ms-securitydevops",
   "description": "Build tasks for performing security analysis.",
   "public": false,

src/extension-manifest.json

@@ -2,7 +2,7 @@
   "manifestVersion": 1,
   "id": "microsoft-security-devops-azdevops",
   "name": "Microsoft Security DevOps",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "publisher": "ms-securitydevops",
   "description": "Build tasks for performing security analysis.",
   "public": true,