Draft: Run Attack Surface Analyzer in pipeline, save report as artifact

[DaveTryon]

Details

PR to have a captured version of the changes to run the Attack Surface Analyzer in the pipeline. This is a recently added SDL requirement and since the extension runs in a pipeline, it seems to make sense to validate it there.

Motivation

Saving this for future reference

Context

Pull request checklist

• Addresses an existing issue: Fixes #0000
• Added relevant unit test for your changes. (yarn test)
• Verified code coverage for the changes made. Check coverage report at: <rootDir>/test-results/unit/coverage
• Ran precheckin (yarn precheckin)

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (808eb42) 94.52% compared to head (abd6fbe) 94.52%.

❗ Current head abd6fbe differs from pull request most recent head 71eb13f. Consider uploading reports for the commit 71eb13f to get more accurate results

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1976   +/-   ##
=======================================
  Coverage   94.52%   94.52%           
=======================================
  Files          38       38           
  Lines        1059     1059           
  Branches      145      145           
=======================================
  Hits         1001     1001           
  Misses         58       58           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.