test compliant release

.azure-devops/graphitation-release.yml

@@ -1,6 +1,6 @@
 pr: none
 trigger:
-  - main
+  - chore/compliant-release
 
 variables:
   - group: InfoSec-SecurityResults
@@ -12,22 +12,21 @@ jobs:
     parameters:
       serviceTreeID: 6F8CD842-E117-412F-BAE4-56A3B6166594
 
-  ## TODO: only enable the following when a secure agent pool has been selected
-  # - job: Release
-  #   variables:
-  #     - group: oss-secrets
-  #   dependsOn: Compliance
-  #   pool: "1ES-Hosted-Ubuntu"
-  #   steps:
-  #     - script: yarn
-  #     - script: |
-  #         yarn ci
-  #       displayName: build and test [test]
-  #     - script: |
-  #         git config user.email "gql-svc@microsoft.com"
-  #         git config user.name "Graphitation Service Account"
-  #       displayName: Configure git for release
-  #     - script: yarn release -y -n $(ossNpmToken) --access public
-  #       displayName: Release
-  #       env:
-  #         NPM_AUTHTOKEN: $(ossGithubPAT)
+  - job: Release
+    variables:
+      - group: oss-secrets
+    dependsOn: Compliance
+    pool: "1ES-Teams-Ubuntu-Latest-Compliant"
+    steps:
+      - script: yarn
+      - script: |
+          yarn ci
+        displayName: build and test [test]
+      - script: |
+          git config user.email "gql-svc@microsoft.com"
+          git config user.name "Graphitation Service Account"
+        displayName: Configure git for release
+      - script: yarn release -y -n $(ossNpmToken) --access public
+        displayName: Release
+        env:
+          NPM_AUTHTOKEN: $(ossGithubPAT)

.azure-devops/templates/compliance-job.yml

@@ -10,7 +10,7 @@ jobs:
   - job: compliance
     displayName: Compliance checks
     pool:
-      name: 1ES-Teams-Win2019-Security
+      name: 1ES-Teams-Window-2019-Compliant
     steps:
       - task: UseDotNet@2
         condition: succeededOrFailed()