{match[5]});
} else if (match[6]) {
parts.push({match[7]});
} else if (match[8]) {
parts.push({match[9]});
}
lastIndex = match.index + match[0].length;
}
if (lastIndex < text.length) parts.push(text.slice(lastIndex));
if (parts.length === 0) return text;
const keyRef = {
current: keyIndex
};
return expandHtmlTags(parts, keyRef);
};
const processBadges = text => {
if (!text || typeof text !== 'string') return text;
if (YES_RE.test(text)) return ✓;
if (NO_RE.test(text)) return ✗;
if (LIMITED_RE.test(text)) return ◐;
return processText(text);
};
const expandSimpleTags = (str, keyRef) => {
const result = [];
let last = 0;
SIMPLE_TAG_RE.lastIndex = 0;
let m;
while ((m = SIMPLE_TAG_RE.exec(str)) !== null) {
if (m.index > last) result.push(str.slice(last, m.index));
if (m[1]) {
result.push(); } else if (m[2]) { result.push(
,
); } else if (m[3]) { result.push(Note: ); } else if (m[4]) { result.push(Warning: ); } last = m.index + m[0].length; } if (last < str.length) result.push(str.slice(last)); return result; }; const expandHtmlTags = (chunks, keyRef) => { const out = []; for (const chunk of chunks) { if (typeof chunk === 'string') { out.push(...expandSimpleTags(chunk, keyRef)); } else { out.push(chunk); } } return out; }; const extractText = node => { if (node === null || node === undefined) return ''; if (typeof node === 'string') return node; if (typeof node === 'number') return String(node); if (typeof node === 'boolean') return ''; if (Array.isArray(node)) return node.map(extractText).join(''); if (node && typeof node === 'object' && node.type) { const props = node.props || ({}); if (typeof props.children === 'string') return props.children; if (props.children) return extractText(props.children); return ''; } return String(node || ''); }; const [mounted, setMounted] = useState(false); useEffect(() => { setMounted(true); }, []); const data = useMemo(() => { if (propData) return propData; if (content && typeof content === 'string') return parseYamlTableContent(content); if (!children) return []; if (typeof children === 'string') return parseYamlTableContent(children); const childrenArray = Array.isArray(children) ? children : [children]; return parseYamlTableContent(childrenArray.map(extractText).join('').trim()); }, [children, propData, content]); const columns = useMemo(() => { if (!data || data.length === 0) return []; const firstRow = data[0]; if (!firstRow || typeof firstRow !== 'object') return []; return Object.keys(firstRow); }, [data]); if (!mounted) return null; if (!data || data.length === 0) return null; const rowKey = row => columns.map(c => row[c] || '').join('|'); return
| {col.replaceAll('_', ' ')} | )}
|---|
| {processBadges(row[col])} | )}
## Integrate Endor Labs with Azure pipelines with the Azure extension
To integrate Endor Labs with Azure pipelines, you need to set up the Azure extension. After you set up the extension, you can configure your pipeline to use Endor Labs.
3. Click an alert to view more details.
4. If you ran endorctl with `--secrets` flag, you can view if there are any secret leaks.
Click the entry to view more details.
## Download and use endorctl in Azure pipeline
You can also choose to set up your pipeline to download endorctl and scan using Endor Labs without using the Azure extension.
### Configure Endor Labs variables in the pipeline
You can manage Endor Labs variables centrally by configuring them within your Azure project. You can assign these variables to multiple pipelines.
1. Log in to Azure and select **Pipelines > Library**.
2. Click **+Variable Group** to add a new variable group for Endor Labs.
3. Enter a name for the variable group, for example, `tenant-variables`, and click **Add** under **Variables**.
4. Add the following variables.
* `ENDOR_API_CREDENTIALS_KEY`
* `ENDOR_API_CREDENTIALS_SECRET`
* `NAMESPACE`
5. Select the variable group that you created.
6. Click **Pipeline Permissions**.
7. Click **+** to add the pipelines in which you want to use the variable group.
### Configure your Azure pipeline
1. Create `azure-pipelines.yml` file in your project, if it doesn't exist.
2. In the `azure-pipelines.yml` file, customize the job configuration based on your project's requirements.
3. Adjust the image field to use the necessary build tools for constructing your software packages, and align your build steps with those of your project. For example, update the node pool settings based on your operating system.
Azure Pipelines often check out commits by their SHA instead of the branch name, which creates a detached HEAD state.
### Automatic branch tracking
When you use the Endor Labs Azure extension, branch tracking is automated. The `enableDetachedRefName` parameter is set to `true` by default, which automatically detects the branch name from your Azure pipeline and appends the `--detached-ref-name` flag during scans. This ensures that scans display the actual branch name instead of the commit SHA.
```yaml theme={null}
steps:
- task: EndorLabsScan@0
inputs:
namespace: 'demo'
sarifFile: 'scanresults.sarif'
serviceConnectionEndpoint: 'Endor'
```
To disable automatic branch tracking and use the commit SHA instead, explicitly set `enableDetachedRefName` to `false`.
```yaml theme={null}
steps:
- task: EndorLabsScan@0
inputs:
enableDetachedRefName: false
namespace: 'demo'
sarifFile: 'scanresults.sarif'
serviceConnectionEndpoint: 'Endor'
```
### Manual branch tracking with endorctl
When you use endorctl, specify the branch name using the `--detached-ref-name` flag.
Use `--detached-ref-name` only to specify the branch name for a commit in detached HEAD state. This associates the commit with the correct branch without setting it as the default branch.
```yaml theme={null}
- script: |
BRANCH_NAME=$(Build.SourceBranchName)
./endorctl scan -n $(NAMESPACE) \
--detached-ref-name="$BRANCH_NAME" \
-s scanresults.sarif
```
Use both `--detached-ref-name` and `--as-default-branch` together when you want to associate the commit with a branch and set it as the default branch scan.
```yaml theme={null}
- script: |
BRANCH_NAME=$(Build.SourceBranchName)
./endorctl scan -n $(NAMESPACE) \
--as-default-branch \
--detached-ref-name="$BRANCH_NAME" \
-s scanresults.sarif
```