Use a managed template.

common/config/azure-pipelines/ci.yaml

@@ -15,4 +15,4 @@ jobs:
     steps:
       - checkout: self
         path: rushstack-legacy
-      - template: templates/build.yaml
+      - template: /common/config/azure-pipelines/templates/build.yaml@self

common/config/azure-pipelines/npm-publish.yaml

@@ -1,21 +1,41 @@
+variables:
+  - name: FORCE_COLOR
+    value: 1
+  - name: NodeVersion
+    value: 14
+
 resources:
   repositories:
     - repository: RushstackMainRepo
       type: github
       name: Microsoft/rushstack
       endpoint: 'GitHub (Rushbot)'
+    - repository: 1esPipelines
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
 
-pool:
-  vmImage: 'ubuntu-latest'
-variables:
-  NodeVersion: 14
-  FORCE_COLOR: 1
-steps:
-  - checkout: self
-    persistCredentials: true
-    path: rushstack-legacy
-  - template: templates/build.yaml
-  - template: templates/publish.yaml
-    parameters:
-      VersionPolicyName: noRush
-  - template: templates/record-published-versions.yaml
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
+  parameters:
+    pool:
+      name: Azure-Pipelines-1ESPT-ExDShared
+      os: windows
+    stages:
+      - stage:
+        jobs:
+          - job:
+            templateContext:
+              outputs:
+                - output: pipelineArtifact
+                  targetPath: $(Build.ArtifactStagingDirectory)/published-versions
+                  artifactName: published-versions
+            steps:
+              - checkout: self
+                persistCredentials: true
+                path: rushstack-legacy
+              - template: /common/config/azure-pipelines/templates/build.yaml@self
+              - template: /common/config/azure-pipelines/templates/publish.yaml@self
+                parameters:
+                  VersionPolicyName: noRush
+              - template: /common/config/azure-pipelines/templates/record-published-versions.yaml@self

common/config/azure-pipelines/templates/record-published-versions.yaml

@@ -16,6 +16,7 @@ steps:
   - script: 'node $(Agent.BuildDirectory)/rushstack/repo-scripts/repo-toolbox/lib/start.js record-versions --out-file $(Build.ArtifactStagingDirectory)/published-versions/published-versions.json'
     displayName: 'Record Published Versions'
     workingDirectory: '$(Agent.BuildDirectory)/rushstack-legacy'
-  - publish: $(Build.ArtifactStagingDirectory)/published-versions
-    artifact: published-versions
-    displayName: 'Publish Artifact: published-versions'
+  # Published by the 1ES template
+  # - publish: $(Build.ArtifactStagingDirectory)/published-versions
+  #   artifact: published-versions
+  #   displayName: 'Publish Artifact: published-versions'