Skip to content

Prod/non-prod pipeline changes required for compliance #5290

@mthalman

Description

@mthalman

More info at https://dev.azure.com/dnceng/internal/_wiki/wikis/DNCEng%20Services%20Wiki/1365/Upcoming-change-Pipeline-classification-1ES-tags-and-branches-(prod-vs.-non-prod) (internal link)

Prod pipelines should not run on non-prod branches

Assuming the pipeline is correctly classified, the mitigation is to refactor the pipelines so that a clone of the original pipeline is created which is only used to run on non-prod branches. It must make use of 1ES.Unofficial.PipelineTemplate in that case.

Affected Pipelines

  • source-build-license-scan
  • source-build-sdk-diff-tests
  • source-build-release-official
  • dotnet-source-build pipeline deleted
  • dotnet-source-build-lite pipeline deleted

Prod pipelines must have 1ES.Official tag

Assuming the pipeline is correctly classified, the mitigation is to onboard to the 1ES.Official.PipelineTemplate template.

Affected Pipelines

  • source-build-license-scan
  • source-build-sdk-diff-tests

Metadata

Metadata

Labels

area-buildImprovements in source-build's own build process

Type

No type

Projects

Status

In Progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions