lacework-container-scan-azure-devops-with-dockerized-scanner

lacework-azure-devops.yml

trigger:
- main

pool:
  vmImage: ubuntu-latest

steps:
- script: |
    docker pull ubuntu:latest
    docker run \
    -e LW_ACCOUNT_NAME=$LW_ACCOUNT_NAME \
    -e LW_ACCESS_TOKEN=$LW_ACCESS_TOKEN \
    -v /var/run/docker.sock:/var/run/docker.sock \
    lacework/lacework-inline-scanner:latest \
    image evaluate ubuntu latest \
    --build-id $(Build.SourceVersion) --build-plan myBuildPlan
  env:
    LW_ACCOUNT_NAME: $(LW_ACCOUNT_NAME)
    LW_ACCESS_TOKEN: $(LW_ACCESS_TOKEN)
  displayName: 'lacework vuln scan'