kiota/guardian/SDL/common
Vincent Biret 35ce3f8f14
security/pipeline compliance (#4137)
* - removes older compliance tasks

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds the 1es template

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - replaces forbidden tasks

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes parameters for publish artifact tasks

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes task version

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - switches to the required pool

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes os name to 1es accepted values

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - removes linux agent where possible

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds note for conversion requirement

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - switches to a loop due to 1es limitations

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - typo fix

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes depends on condition

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds baseline suppression for app settings stage

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - moves the pool to the jobs only

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds windows pool for source analysis

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds image information

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds baseline for all checkout jobs

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes indent

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - switches macOS steps to regular pipeline pool

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - switches to configurable preview branch

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes reference to parameter

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - fixes condition

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds missing quotes

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - disambiguates artifact upload

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds iteration over binaries download in deploy step

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - indent fix

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - improves download titles

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds request package parent path for compliance

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

* - adds missing SBOM source

Signed-off-by: Vincent Biret <vibiret@microsoft.com>

---------

Signed-off-by: Vincent Biret <vibiret@microsoft.com>
2024-03-06 13:53:44 +03:00
..
.gdnbaselines security/pipeline compliance (#4137) 2024-03-06 13:53:44 +03:00
.gdnsuppress security/pipeline compliance (#4137) 2024-03-06 13:53:44 +03:00