Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Execution of pipeline with security devops -task fails if Node6 tasks disabled #44

Open
JanneRantala opened this issue May 10, 2023 · 14 comments · Fixed by #108
Open

Execution of pipeline with security devops -task fails if Node6 tasks disabled #44

JanneRantala opened this issue May 10, 2023 · 14 comments · Fixed by #108

Comments

@JanneRantala
Copy link

Our organization has "Disable Node6 tasks" turned on for security reasons at organization level. With this turned on, pipeline won't even start execution because of an error which says

"The pipeline is not valid. Job Job: Step 'MicrosoftSecurityDevOps' references task 'MicrosoftSecurityDevOps' at version '1.6.0' contains an execution handler that relies on NodeJS version '6' which is restricted by your administrator."

@dotpaul
Copy link

dotpaul commented Jun 15, 2023

Should be fixed with #34; please let @davidknise know if not

@dotpaul dotpaul closed this as completed Jun 15, 2023
@JanneRantala
Copy link
Author

@davidknise This is still an issue in version 1.7.1

The pipeline is not valid. Job Job: Step 'MicrosoftSecurityDevOps' references task 'MicrosoftSecurityDevOps' at version '1.7.1' contains an execution handler that relies on NodeJS version '6' which is restricted by your administrator.

@dotpaul dotpaul reopened this Jun 19, 2023
@JanneRantala
Copy link
Author

JanneRantala commented Sep 19, 2023

When we could expect a fix for this, @dotpaul @davidknise? Issue still exists with latest 1.8.0 release.

@koesper
Copy link

koesper commented Nov 14, 2023

Still an issue, in 1.10.0 ?

@JanneRantala
Copy link
Author

Still an issue, in 1.10.0 ?

Yes:

"The pipeline is not valid. Job Job: Step 'MicrosoftSecurityDevOps' references task 'MicrosoftSecurityDevOps' at version '1.10.0' contains an execution handler that relies on NodeJS version '6' which is restricted by your administrator."

@JanneRantala
Copy link
Author

Could someone from Microsoft give some estimate when this would be fixed? @dotpaul? @davidknise? Someone? After several months this is still an issue and currently blocks our use of this feature.

@yo1-markenstein
Copy link

With version 1.11.1 the issue still exist. Can't use this task in our organization.
Note that nodejs 6 is disabled for security reasons (should be of interest for a security scan task)

@reynoldsa
Copy link
Contributor

reynoldsa commented Apr 9, 2024

Looking into this. We have a theory.

EDIT: issue is confirmed. Looking at a workaround to publish.

@reynoldsa
Copy link
Contributor

Mistakenly closed before release.

@reynoldsa reynoldsa reopened this Apr 10, 2024
@reynoldsa
Copy link
Contributor

This should be fixed now. Please try any failing pipelines again. I will close this issue in a week if there are no further reports.

@rantalajanne
Copy link

Can confirm, it's working now. Thanks, @reynoldsa & others!

@koesper
Copy link

koesper commented Apr 12, 2024

any idea when the new release is coming?
If i understand correctly, this should be fixed in v1.12.1, current release is still v1.11.0

@JanneRantala
Copy link
Author

is there a new release coming then?

or should we try v1.11.0?

Version 1.12.1 fixes the problem, it was released yesterday/today.

@yo1-markenstein
Copy link

Awesome, working here too. 👌
Thanks @reynoldsa

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
6 participants