BST-18043 Add the Azure Devops pipelines scan tests

Author: lindycoder

.github/workflows/scan-test.yml

@@ -6,6 +6,41 @@ on:
     paths: ['scanners/**']
 
 jobs:
+  azure-devops-pipelines:
+    name: Azure DevOps Pipelines
+    runs-on: ubuntu-latest
+    steps:
+      - name: Azure Login (OIDC)
+        uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.BOOST_SCAN_RUNNER_ADO_CLIENT_ID }}
+          tenant-id: ${{ secrets.BOOST_SCAN_RUNNER_ADO_TENANT_ID }}
+          allow-no-subscriptions: true
+      - name: Get Azure DevOps Token
+        id: azure-token
+        run: |
+          token=$(az account get-access-token \
+            --resource 499b84ac-1321-427f-aa17-267ca6975798 \
+            --query accessToken -o tsv)
+          echo "token=$token" >> $GITHUB_OUTPUT
+          echo "::add-mask::$token"
+      - name: Checkout scanner registry
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Need full history to detect changes
+      - name: Run Tests
+        uses: boostsecurityio/scan-test-action@53e2f687ab93ac5d150b88abd7341b72f6fbf384
+        with:
+          provider: github-actions
+          provider-config: |
+            {
+              "token": "${{ steps.azure-token.outputs.token }}",
+              "organization": "BoostSecurity",
+              "project": "cicd-tools",
+              "pipeline_id": 1
+            }
+          registry-repo: "${{ github.repository_owner }}/${{ github.event.repository.name }}"
+          base-ref: "${{ github.base_ref }}"
   bitbucket-action:
     name: Bitbucket Pipelines
     runs-on: ubuntu-latest

docs/setup-azure-devops.md

@@ -98,8 +98,8 @@ jobs:
       - name: Azure Login (OIDC)
         uses: azure/login@v2
         with:
-          client-id: ${{ secrets.AZURE_CLIENT_ID }}
-          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          client-id: ${{ secrets.BOOST_SCAN_RUNNER_ADO_CLIENT_ID }}
+          tenant-id: ${{ secrets.BOOST_SCAN_RUNNER_ADO_TENANT_ID }}
           allow-no-subscriptions: true
 
       - name: Get Azure DevOps Token