Add compliance to buildpipline

DeviceTests/DeviceTests.Android/DeviceTests.Android.csproj

@@ -61,7 +61,7 @@
     <PackageReference Include="System.Numerics.Vectors" Version="4.5.0" />
     <PackageReference Include="xunit" Version="2.4.1" />
     <PackageReference Include="xunit.runner.devices" Version="2.5.25" />
-    <PackageReference Include="Microsoft.DotNet.XHarness.TestRunners.Xunit" Version="1.0.0-prerelease.21620.1" />
+    <PackageReference Include="Microsoft.DotNet.XHarness.TestRunners.Xunit" Version="1.0.0-prerelease.23212.1" />
     <PackageReference Include="Xamarin.AndroidX.MediaRouter" Version="1.2.0.1" />
     <PackageReference Include="Xamarin.AndroidX.Palette" Version="1.0.0.6" />
   </ItemGroup>

DeviceTests/DeviceTests.iOS/DeviceTests.iOS.csproj

@@ -80,7 +80,7 @@
     <PackageReference Include="Xamarin.Forms" Version="5.0.0.2083" />
     <PackageReference Include="xunit" Version="2.4.1" />
     <PackageReference Include="xunit.runner.devices" Version="2.5.25" />
-    <PackageReference Include="Microsoft.DotNet.XHarness.TestRunners.Xunit" Version="1.0.0-prerelease.21620.1" />
+    <PackageReference Include="Microsoft.DotNet.XHarness.TestRunners.Xunit" Version="1.0.0-prerelease.23212.1" />
     <PackageReference Include="System.Numerics.Vectors" Version="4.5.0" />
   </ItemGroup>
   <ItemGroup>

DeviceTests/DeviceTests.iOS/Info.plist

@@ -57,5 +57,9 @@
 	<string>Access to your location is required for cool things to happen!</string>
 	<key>NSContactsUsageDescription</key>
 	<string>Contacts</string>
+	<key>UIRequiredDeviceCapabilities</key>
+    <array>
+        <string>arm64</string>
+    </array>
 </dict>
 </plist>

DeviceTests/build.cake

@@ -5,8 +5,8 @@
 
 var TARGET = Argument("target", "Default");
 
-var IOS_SIM_NAME = Argument("ios-device", EnvironmentVariable("IOS_SIM_NAME") ?? "iPhone 11");
-var IOS_SIM_RUNTIME = Argument("ios-runtime", EnvironmentVariable("IOS_SIM_RUNTIME") ?? "com.apple.CoreSimulator.SimRuntime.iOS-14-2");
+var IOS_SIM_NAME = Argument("ios-device", EnvironmentVariable("IOS_SIM_NAME") ?? "iPhone 14");
+var IOS_SIM_RUNTIME = Argument("ios-runtime", EnvironmentVariable("IOS_SIM_RUNTIME") ?? "ios-simulator-64");
 var IOS_PROJ = "./DeviceTests.iOS/DeviceTests.iOS.csproj";
 var IOS_BUNDLE_ID = "com.xamarin.essentials.devicetests";
 var IOS_IPA_PATH = "./DeviceTests.iOS/bin/iPhoneSimulator/Release/XamarinEssentialsDeviceTestsiOS.app";

NuGet.config

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+  <packageSources>
+    <clear/>
+    <add key="dotnet-eng" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-eng/nuget/v3/index.json" protocolVersion="3" />
+    <add key="dotnet-public" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public/nuget/v3/index.json" protocolVersion="3" />
+    <add key="dotnet6" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet6/nuget/v3/index.json" />
+  </packageSources>
+  <activePackageSource>
+    <add key="All" value="(Aggregate source)" />
+  </activePackageSource>
+</configuration>

azure-pipelines.yml

@@ -15,6 +15,7 @@ variables:
   GIT_SHA: $(Build.SourceVersion)
   GIT_BRANCH_NAME: $(Build.SourceBranchName)
   AREA_PATH: 'DevDiv\Xamarin SDK\Build and Tools'
+  CAKE_VERSION: '2.1.0'
 
 resources:
   repositories:
@@ -36,8 +37,10 @@ stages:
     jobs:
     - template: .ci/build.v1.yml@components
       parameters:
+        runChecks: false
         dotnet: '3.1.415'
         dotnetStable: '3.1.415'
+        cake: '2.1.0'
         ${{ if eq(variables['System.TeamProject'], 'devdiv') }}:    # The AzurePipelines-EO pool is only available in DevDiv
           windowsAgentPoolName: AzurePipelines-EO
           windowsImage: ''  # Override the 'windows-latest' default settings
@@ -92,6 +95,16 @@ stages:
           packageFilter: '*.nupkg'
           packageVersionRegex: '(?i)^Xamarin.Essentials\.(?<version>\d+\.\d+\.\d+)(.*).nupkg$'
 
+  - ${{ if eq(variables['System.TeamProject'], 'devdiv') }}:
+    - template: security/full/v0.yml@internal-templates
+      parameters:
+        dependsOn: [ ]
+        credScanSuppressionFile: $(Build.SourcesDirectory)\build-tools\automation\guardian\CredScanSuppressions.json
+        sourceGdnSuppressionFile: $(Build.SourcesDirectory)\build-tools\automation\guardian\source.gdnsuppress
+        tsaConfigFile: $(Build.SourcesDirectory)\build-tools\automation\guardian\tsaoptions-v2.json
+        policheckExclusionFilesFolder: $(Build.SourcesDirectory)\build-tools\automation\guardian
+        policheckGdnSuppressionFilesFolder: $(Build.SourcesDirectory)\build-tools\automation\guardian
+
   - ${{ if not(startsWith(variables['Build.SourceBranch'], 'refs/tags/')) }}:
     - stage: devicetests
       displayName: Device Tests
@@ -124,6 +137,7 @@ stages:
 
         - template: .ci/build.v1.yml@components
           parameters:
+            macosImage: 'macos-12'
             name: devicetests_ios
             runChecks: false
             displayName: iOS
@@ -133,7 +147,9 @@ stages:
             verbosity: diagnostic
             cakeFile: DeviceTests/build.cake
             cakeTarget: test-ios-emu
-            xharness: '1.0.0-prerelease.21620.1'
+            cake: $(CAKE_VERSION)
+            xcode: '14.2'
+            xharness: '1.0.0-prerelease.23212.1'
 
         - template: .ci/build.v1.yml@components
           parameters:
@@ -147,6 +163,7 @@ stages:
             cakeFile: DeviceTests/build.cake
             cakeTarget: test-android-emu
             cakeExtraArgs: --avd-target="`"system-images;android-21;google_apis;x86`""
+            cake: $(CAKE_VERSION)
             preBuildSteps:
               - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-21;google_apis;x86\""
                 displayName: Install the Android emulators
@@ -163,6 +180,7 @@ stages:
             cakeFile: DeviceTests/build.cake
             cakeTarget: test-android-emu
             cakeExtraArgs: --avd-target="`"system-images;android-22;google_apis;x86`""
+            cake: $(CAKE_VERSION)
             preBuildSteps:
               - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-22;google_apis;x86\""
                 displayName: Install the Android emulators
@@ -180,6 +198,7 @@ stages:
 #             cakeFile: DeviceTests/build.cake
 #             cakeTarget: test-android-emu
 #             cakeExtraArgs: --avd-target="`"system-images;android-23;google_apis;x86`""
+#             cake: $(CAKE_VERSION)
 #             preBuildSteps:
 #               - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-23;google_apis;x86\""
 #                 displayName: Install the Android emulators
@@ -196,6 +215,7 @@ stages:
             cakeFile: DeviceTests/build.cake
             cakeTarget: test-android-emu
             cakeExtraArgs: --avd-target="`"system-images;android-24;google_apis;x86`""
+            cake: $(CAKE_VERSION)
             preBuildSteps:
               - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-24;google_apis;x86\""
                 displayName: Install the Android emulators
@@ -212,6 +232,7 @@ stages:
             cakeFile: DeviceTests/build.cake
             cakeTarget: test-android-emu
             cakeExtraArgs: --avd-target="`"system-images;android-26;google_apis;x86`""
+            cake: $(CAKE_VERSION)
             preBuildSteps:
               - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-26;google_apis;x86\""
                 displayName: Install the Android emulators
@@ -228,6 +249,7 @@ stages:
             cakeFile: DeviceTests/build.cake
             cakeTarget: test-android-emu
             cakeExtraArgs: --avd-target="`"system-images;android-29;google_apis;x86`""
+            cake: $(CAKE_VERSION)
             preBuildSteps:
               - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-29;google_apis;x86\""
                 displayName: Install the Android emulators
@@ -244,6 +266,7 @@ stages:
         #     cakeFile: DeviceTests/build.cake
         #     cakeTarget: test-android-emu
         #     cakeExtraArgs: --avd-target="`"system-images;android-30;google_apis;x86`""
+        #     cake: $(CAKE_VERSION)
         #     preBuildSteps:
         #       - bash: sh -c "echo \"y\" | $ANDROID_HOME/tools/bin/sdkmanager \"system-images;android-30;google_apis;x86\""
         #         displayName: Install the Android emulators

build-tools/automation/guardian/CredScanSuppressions.json

@@ -0,0 +1,6 @@
+{
+    "tool": "Credential Scanner",
+    "suppressions": [
+
+    ]
+}