This extension will let you call Retire.js as part of a Azure DevOps build pipeline. Detect JavaScript libraries with vulnerabilities as part of your build. All credits go back to the developers of Retire.js.
Go to the Retire extension on the Azure DevOps Marketplace and click the Get it free button.
Select your organization and click the Install button.
In the pipeline, search for 'retire' in the Tasks view and click the Run Retire search result.
The task will run with default values for all options but you can tweak them if you like.
The yaml code added by the task will look similar to this:
- task: Retire@1
inputs:
verbose: false
failOnVulnerabilities: false