Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ci] Migrate to the 1ES template #8747

Merged
merged 39 commits into from
Mar 4, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
18ef824
[ci] Migrate to the 1ES template
pjcollins Feb 21, 2024
2de0a12
Try to fix variable import
pjcollins Feb 21, 2024
b9eff07
Use rooted template paths
pjcollins Feb 21, 2024
3bf4782
Rooted template paths take 2
pjcollins Feb 21, 2024
a5818bd
Use 1es publish for linux build
pjcollins Feb 21, 2024
743635c
Pass use1ESTemplate=true to all signing jobs
pjcollins Feb 21, 2024
0c3d9f2
Use 'output: nuget' instead of NuGetCommand@2
pjcollins Feb 21, 2024
c2dce75
Update sdl repos to scan
pjcollins Feb 21, 2024
ebe16bf
Update pools
pjcollins Feb 21, 2024
dabedab
Fixing pools, guardian suppressions
pjcollins Feb 21, 2024
50fc87e
Update monodroid guardian files
pjcollins Feb 21, 2024
fcb0c2f
More windows parallelization, use pipeline outputs for macos build
pjcollins Feb 22, 2024
398dae9
Remove setup-linux, update nightly
pjcollins Feb 22, 2024
35c5864
bump monodroid, fix mac build source path
pjcollins Feb 22, 2024
e0cc0ab
Update result publishing and timeout
pjcollins Feb 22, 2024
b68f2e6
Merge remote-tracking branch 'origin/main' into dev/pjc/1estemp
pjcollins Feb 22, 2024
d174ca2
Restore multi-language policheck scan
pjcollins Feb 22, 2024
c6ada8e
Rename gdnsuppress for policheck template
pjcollins Feb 22, 2024
23808ee
Update source.gdnsuppress
pjcollins Feb 22, 2024
acd8ef6
Update guardian files
pjcollins Feb 23, 2024
9385185
Remove dupe folder
pjcollins Feb 23, 2024
6ee0182
Merge remote-tracking branch 'origin/main' into dev/pjc/1estemp
pjcollins Feb 26, 2024
c997c20
Update sdl task params
pjcollins Feb 26, 2024
0b90087
Use yaml templates main
pjcollins Feb 27, 2024
1f323ee
Test new windows pool
pjcollins Feb 28, 2024
20352a6
Merge remote-tracking branch 'origin/main' into dev/pjc/1estemp
pjcollins Feb 28, 2024
80572d0
Use new win pool
pjcollins Feb 28, 2024
45f3b6f
Invoke boots with pwsh, diagnostic install
pjcollins Feb 28, 2024
fbff670
Install dotnet tools locally and prepend path
pjcollins Feb 28, 2024
fac7da6
Try full tool path
pjcollins Feb 28, 2024
fbe295f
Use full tool paths
pjcollins Feb 28, 2024
b65dea8
Try to reenable static macos PR build pool
pjcollins Feb 29, 2024
536df9a
Try MAUI-DevDiv pool
pjcollins Feb 29, 2024
03532f3
Test new MAUI-1ESPT pool
pjcollins Feb 29, 2024
5bf687c
Update names, dotnet tool install path and lookup
pjcollins Feb 29, 2024
ff8af4f
Fix macos pool condition
pjcollins Feb 29, 2024
a839e16
Testing powershell on image
pjcollins Mar 1, 2024
a82985e
Try to add powershell to path for maui test job
pjcollins Mar 1, 2024
18d700a
Simplify macos PR build pool condition
pjcollins Mar 1, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions .gdn/.gdnsettings
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
{
"files": { },
"folders": { },
"overwriteLogs": true,
"telemetryFlushTimeout": 10,
"variables": { }
}
62 changes: 62 additions & 0 deletions .gdn/.gdnsuppress
Original file line number Diff line number Diff line change
@@ -0,0 +1,62 @@
{
"hydrated": false,
"properties": {
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
"hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
},
"version": "1.0.0",
"suppressionSets": {
"default": {
"name": "default",
"createdDate": "2024-02-21 20:58:02Z",
"lastUpdatedDate": "2024-02-22 21:40:38Z"
}
},
"results": {
"28e1a7a1157c8739dce8ac1bbd828a471e477444ec50d2656d0440948b58a274": {
"signature": "28e1a7a1157c8739dce8ac1bbd828a471e477444ec50d2656d0440948b58a274",
"alternativeSignatures": [],
"memberOf": [
"default"
],
"justification": "FillEventHistory+Event API documentation with generic example password.",
"createdDate": "2024-02-21 20:58:02Z"
},
"0b7cc0b28f27b0eeb2a415f10e62c32675dd2d4edcffe35600eae35f8064004e": {
"signature": "0b7cc0b28f27b0eeb2a415f10e62c32675dd2d4edcffe35600eae35f8064004e",
"alternativeSignatures": [],
"memberOf": [
"default"
],
"justification": "Android.Service.Autofill.FillEventHistory+Event API documentation with generic example password.",
"createdDate": "2024-02-21 20:58:02Z"
},
"e57727a14a28f6fd8f4aa87cd3c4b33401dfea1078ce32fb3cbdf342e8adf63d": {
"signature": "e57727a14a28f6fd8f4aa87cd3c4b33401dfea1078ce32fb3cbdf342e8adf63d",
"alternativeSignatures": [],
"memberOf": [
"default"
],
"justification": "Javax.Crypto.ISecretKey API documentation with generic example password.",
"createdDate": "2024-02-21 20:58:02Z"
},
"15c51590a2e2bb503a7277448e05357f5fd8d4cb2f9b9b7446e41c872cceaac4": {
"signature": "15c51590a2e2bb503a7277448e05357f5fd8d4cb2f9b9b7446e41c872cceaac4",
"alternativeSignatures": [],
"memberOf": [
"default"
],
"justification": "Javax.Security.Auth.Callback.PasswordCallback API documentation with generic example password.",
"createdDate": "2024-02-21 20:58:02Z"
},
"1ccf925aa704efd1035bac38e94d2e629fb5b0d1784d5473e4a52e6d13db16ee": {
"signature": "1ccf925aa704efd1035bac38e94d2e629fb5b0d1784d5473e4a52e6d13db16ee",
"alternativeSignatures": [],
"memberOf": [
"default"
],
"justification": "Dummy test.keystore file used for testing.",
"createdDate": "2024-02-21 20:58:02Z"
}
}
}
11 changes: 11 additions & 0 deletions .gdn/.gitignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
## Ignore Guardian internal files
.r/
rc/
rs/
i/
p/
c/
o/

## Ignore Guardian Local settings
LocalSettings.gdn.json
26 changes: 26 additions & 0 deletions .gdn/policheck/CHT.gdnsuppress
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
{
"hydrated": false,
"properties": {
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
"hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
},
"version": "1.0.0",
"suppressionSets": {
"default": {
"name": "default",
"createdDate": "2023-02-24 00:05:39Z",
"lastUpdatedDate": "2024-02-22 21:40:38Z"
}
},
"results": {
"04910d714a13bf4523ffa77350f654f52114fa4fa3d760c9f63186d41716c019": {
"signature": "04910d714a13bf4523ffa77350f654f52114fa4fa3d760c9f63186d41716c019",
"alternativeSignatures": [],
"memberOf": [
"default"
],
"justification": "Reference to the Android package format APK.",
"createdDate": "2023-02-24 00:05:39Z"
}
}
}
171 changes: 171 additions & 0 deletions .gdn/policheck/source.gdnsuppress
Original file line number Diff line number Diff line change
@@ -0,0 +1,171 @@
{
"hydrated": false,
"properties": {
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
"hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
},
"version": "1.0.0",
"suppressionSets": {
"default": {
"name": "default",
"createdDate": "2023-02-22 23:55:29Z",
"lastUpdatedDate": "2024-02-22 21:40:38Z"
}
},
"results": {
"6789cab1bdc97b0cc3ad057b7fdd21d63cdf8bc2679391923803fa240ef81292": {
"signature": "6789cab1bdc97b0cc3ad057b7fdd21d63cdf8bc2679391923803fa240ef81292",
"alternativeSignatures": [
"b5041e3ec6776af49d6d69148e4db480f366b559299d19ec8ea3e095295b39a8"
],
"memberOf": [
"default"
],
"justification": "Reference to an ISCII term.",
"createdDate": "2023-02-22 23:55:29Z"
},
"bbaf5f946cb72748567e41f0df5f1bae05550f4ba7381e21ec6b26d6c3ecec9f": {
"signature": "bbaf5f946cb72748567e41f0df5f1bae05550f4ba7381e21ec6b26d6c3ecec9f",
"alternativeSignatures": [
"739cb5e6ee2409515900652ca668f819f697f23834becece8d2f9f9236723c1b"
],
"memberOf": [
"default"
],
"justification": "Reference to an ISCII term.",
"createdDate": "2023-02-22 23:55:29Z"
},
"db8916a0f0cdca4082c540921dd362e09a9ff413862ab826308411b76ee35789": {
"signature": "db8916a0f0cdca4082c540921dd362e09a9ff413862ab826308411b76ee35789",
"alternativeSignatures": [
"a755747462567003e5aa2b7bf01aa72af5143714e427ad043747b1fb54b1c440"
],
"memberOf": [
"default"
],
"justification": "Reference to an Android logging function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"6d1fb3a483eb491710d6a09ed0b4bab47f13942d0c6fc744e6683614a66604ab": {
"signature": "6d1fb3a483eb491710d6a09ed0b4bab47f13942d0c6fc744e6683614a66604ab",
"alternativeSignatures": [
"a755747462567003e5aa2b7bf01aa72af5143714e427ad043747b1fb54b1c440"
],
"memberOf": [
"default"
],
"justification": "Reference to an Android logging function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"b07e75fc8a506b94690dbd06877da06c1228e40e7deda3967f6b882b842f726d": {
"signature": "b07e75fc8a506b94690dbd06877da06c1228e40e7deda3967f6b882b842f726d",
"alternativeSignatures": [
"a755747462567003e5aa2b7bf01aa72af5143714e427ad043747b1fb54b1c440"
],
"memberOf": [
"default"
],
"justification": "Reference to an Android logging function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"87d8313310c2dd42021844b95bdcb9121bf10036fea5b212b945e0732a456e5a": {
"signature": "87d8313310c2dd42021844b95bdcb9121bf10036fea5b212b945e0732a456e5a",
"alternativeSignatures": [
"a755747462567003e5aa2b7bf01aa72af5143714e427ad043747b1fb54b1c440"
],
"memberOf": [
"default"
],
"justification": "Reference to an Android logging function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"8e5400e0233c8d887ad48bd8a48e8a7be5a579f9eefad521419b6df0828bbfac": {
"signature": "8e5400e0233c8d887ad48bd8a48e8a7be5a579f9eefad521419b6df0828bbfac",
"alternativeSignatures": [
"a755747462567003e5aa2b7bf01aa72af5143714e427ad043747b1fb54b1c440"
],
"memberOf": [
"default"
],
"justification": "Reference to an Android logging function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"1b38e026fae90da4ae2fe9151c9c1ebd73c8b3c2c5f072ceae390a3ceec2fb97": {
"signature": "1b38e026fae90da4ae2fe9151c9c1ebd73c8b3c2c5f072ceae390a3ceec2fb97",
"alternativeSignatures": [
"a755747462567003e5aa2b7bf01aa72af5143714e427ad043747b1fb54b1c440"
],
"memberOf": [
"default"
],
"justification": "Reference to an Android logging function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"a2b4d032c59a9d1211d218c3cd550cf8febb369941d70284d07d03ebee855bc0": {
"signature": "a2b4d032c59a9d1211d218c3cd550cf8febb369941d70284d07d03ebee855bc0",
"alternativeSignatures": [
"9feaec8a73b72e0d212c0e18d863e4fe16ff010c5d33cf8d47d8b0f465cc4c5e"
],
"memberOf": [
"default"
],
"justification": "Reference to find first set bit function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"1c87b45a6044d205dc3f3562f349c238f7cabe22b4609da762df9dc44151e9fb": {
"signature": "1c87b45a6044d205dc3f3562f349c238f7cabe22b4609da762df9dc44151e9fb",
"alternativeSignatures": [
"9feaec8a73b72e0d212c0e18d863e4fe16ff010c5d33cf8d47d8b0f465cc4c5e"
],
"memberOf": [
"default"
],
"justification": "Reference to find first set bit function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"a6639098c4785509a4215c9e2fc10f82c06fce461915dc11a00227ddec558845": {
"signature": "a6639098c4785509a4215c9e2fc10f82c06fce461915dc11a00227ddec558845",
"alternativeSignatures": [
"9feaec8a73b72e0d212c0e18d863e4fe16ff010c5d33cf8d47d8b0f465cc4c5e"
],
"memberOf": [
"default"
],
"justification": "Reference to find first set bit function.",
"createdDate": "2023-02-22 23:55:29Z"
},
"f94ede7b396cb54934db2084f0879cd31a17ce2584eb01e0bfcd35324a724c31": {
"signature": "f94ede7b396cb54934db2084f0879cd31a17ce2584eb01e0bfcd35324a724c31",
"alternativeSignatures": [
"9feaec8a73b72e0d212c0e18d863e4fe16ff010c5d33cf8d47d8b0f465cc4c5e"
],
"memberOf": [
"default"
],
"justification": "Reference to find first set bit function.",
"createdDate": "2024-02-22 21:40:38Z"
},
"b34b42aa41018376a31460c142f2ae910704725d9e9a4470f92b587df682369b": {
"signature": "b34b42aa41018376a31460c142f2ae910704725d9e9a4470f92b587df682369b",
"alternativeSignatures": [
"3901d031f3ac168bb1a84d06bb234355af514c59a0ed9da325b11a8861ff0b05"
],
"memberOf": [
"default"
],
"justification": "Reference to output from an external tool.",
"createdDate": "2023-02-22 23:55:29Z"
},
"243e199c7aec22377e0363bdca82384278cc36b0674f35697935fde6c45cfd0e": {
"signature": "243e199c7aec22377e0363bdca82384278cc36b0674f35697935fde6c45cfd0e",
"alternativeSignatures": [
"cf02f44873b25336e01a1fa294bd858d2ea69ae734f08c6db40d4b83d17ccf76"
],
"memberOf": [
"default"
],
"justification": "Reference to a proper name.",
"createdDate": "2023-10-26 21:20:54Z"
}
}
}
Loading