Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable Security and Compliance tasks in our Release pipeline #11849

Merged
85 commits merged into from
Jan 5, 2022
Merged

Enable Security and Compliance tasks in our Release pipeline #11849

85 commits merged into from
Jan 5, 2022

Commits on Nov 30, 2021

  1. Add compliance task to pipeline

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    1977f6b View commit details
    Browse the repository at this point in the history

  2. attempt machine version test and change to artifact feed connection

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    a151fed View commit details
    Browse the repository at this point in the history

  3. bippity boppity boo

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    d9ffba3 View commit details
    Browse the repository at this point in the history

  4. goof less

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    6a63f3c View commit details
    Browse the repository at this point in the history

  5. undo temporary testing stuff

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    8b38ccc View commit details
    Browse the repository at this point in the history

  6. re-sprinkle helix access tokens

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    75e5c95 View commit details
    Browse the repository at this point in the history

  7. conditionally append access token

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    b9dc74e View commit details
    Browse the repository at this point in the history

  8. use correct method name

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    ebe8075 View commit details
    Browse the repository at this point in the history

  9. attempt to break out compliance tasks onto 2019 image and temporarily… 

    … use recycled artifacts to speed this up
    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    ffc5dc3 View commit details
    Browse the repository at this point in the history

  10. add checkout bit and nerf dependency

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    1dc142b View commit details
    Browse the repository at this point in the history

  11. wrong indent because yaml

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    75c69fd View commit details
    Browse the repository at this point in the history

  12. apparently pkgesseccomp not updated to 12 for 1es

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    8fa0dd1 View commit details
    Browse the repository at this point in the history

  13. wrong destination folder for copy pasta

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    68c52c2 View commit details
    Browse the repository at this point in the history

  14. try a different place for archives?

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    40f77ff View commit details
    Browse the repository at this point in the history

  15. make testing this slightly easier temporarily

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    ed7ccac View commit details
    Browse the repository at this point in the history

  16. try to show output

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    61eea11 View commit details
    Browse the repository at this point in the history

  17. try to show output

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    96a7f25 View commit details
    Browse the repository at this point in the history

  18. try to show output

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    865a0d7 View commit details
    Browse the repository at this point in the history

  19. more unzip fun

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    2e3c8ac View commit details
    Browse the repository at this point in the history

  20. messin' about

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    446f4b5 View commit details
    Browse the repository at this point in the history

  21. vmimage

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    b237283 View commit details
    Browse the repository at this point in the history

  22. add pkges setup task to compliance pipe

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    5c4c708 View commit details
    Browse the repository at this point in the history

  23. update match patterns

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    77eab3c View commit details
    Browse the repository at this point in the history

  24. separate extract into two steps I guess

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    a4d6ad8 View commit details
    Browse the repository at this point in the history

  25. throw more things at the wall

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    f7b1e96 View commit details
    Browse the repository at this point in the history

  26. remove line

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    4f697bd View commit details
    Browse the repository at this point in the history

  27. let's see how this blends

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    826f8c0 View commit details
    Browse the repository at this point in the history

  28. fiddle about

    @miniksa
    miniksa committed Nov 30, 2021
    Configuration menu
    Copy the full SHA
    a9a3789 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2021

  1. ran out of heap space on compile with x86. fortunately v3 of the task… 

    … (which I was supposed to move to anyway) uses x64 by default.
    @miniksa
    miniksa committed Dec 1, 2021
    Configuration menu
    Copy the full SHA
    aa12f45 View commit details
    Browse the repository at this point in the history

Commits on Dec 2, 2021

  1. apparently npm is required by v3. go back to v2 and force x64 to pass… 

    … the heap thing.
    @miniksa
    miniksa committed Dec 2, 2021
    Configuration menu
    Copy the full SHA
    c9ded19 View commit details
    Browse the repository at this point in the history

Commits on Dec 3, 2021

  1. use v3 I guess and install npm

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    cb829f5 View commit details
    Browse the repository at this point in the history

  2. stop confusing myself.

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    8607097 View commit details
    Browse the repository at this point in the history

  3. wrong node installer

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    4c34f0b View commit details
    Browse the repository at this point in the history

  4. Revert "wrong node installer" 

    This reverts commit 4c34f0b.
    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    fd14a71 View commit details
    Browse the repository at this point in the history

  5. Revert "stop confusing myself." 

    This reverts commit 8607097.
    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    ee69e06 View commit details
    Browse the repository at this point in the history

  6. ok let's try this who knows.

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    95a1fff View commit details
    Browse the repository at this point in the history

  7. build msix default

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    9908721 View commit details
    Browse the repository at this point in the history

  8. boo

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    0b6ac59 View commit details
    Browse the repository at this point in the history

  9. add msbuild.exe

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    7c7e427 View commit details
    Browse the repository at this point in the history

  10. throw more eggs at the wall

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    ead0864 View commit details
    Browse the repository at this point in the history

  11. true

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    c4a5c09 View commit details
    Browse the repository at this point in the history

  12. nerf some stuff while I test

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    5849938 View commit details
    Browse the repository at this point in the history

  13. try something else who knows

    @miniksa
    miniksa committed Dec 3, 2021
    Configuration menu
    Copy the full SHA
    ebd8aae View commit details
    Browse the repository at this point in the history

Commits on Dec 4, 2021

  1. Try building just the WindowsTerminal proj

    @miniksa
    miniksa authored Dec 4, 2021
    Configuration menu
    Copy the full SHA
    8df6d1d View commit details
    Browse the repository at this point in the history

  2. turn it up to 11

    @miniksa
    miniksa authored Dec 4, 2021
    Configuration menu
    Copy the full SHA
    cb5eed8 View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2021

  1. turn off policheck for now

    @miniksa
    miniksa committed Dec 6, 2021
    Configuration menu
    Copy the full SHA
    9e6733f View commit details
    Browse the repository at this point in the history

  2. try turning off prefast

    @miniksa
    miniksa committed Dec 6, 2021
    Configuration menu
    Copy the full SHA
    ae7e598 View commit details
    Browse the repository at this point in the history

  3. and turn policheck back on

    @miniksa
    miniksa committed Dec 6, 2021
    Configuration menu
    Copy the full SHA
    925e93e View commit details
    Browse the repository at this point in the history

  4. make some bins

    @miniksa
    miniksa committed Dec 6, 2021
    Configuration menu
    Copy the full SHA
    a9f3d4b View commit details
    Browse the repository at this point in the history

  5. try 4 hours why not

    @miniksa
    miniksa committed Dec 6, 2021
    Configuration menu
    Copy the full SHA
    6281c88 View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2021

  1. try going to the source

    @miniksa
    miniksa committed Dec 7, 2021
    Configuration menu
    Copy the full SHA
    e97db4e View commit details
    Browse the repository at this point in the history

  2. continue slamming head directly into wall

    @miniksa
    miniksa committed Dec 7, 2021
    Configuration menu
    Copy the full SHA
    6c4dd22 View commit details
    Browse the repository at this point in the history

  3. enable xfg, I think

    @miniksa
    miniksa committed Dec 7, 2021
    Configuration menu
    Copy the full SHA
    fb78f11 View commit details
    Browse the repository at this point in the history

  4. temporarily nerf actual signing

    @miniksa
    miniksa committed Dec 7, 2021
    1 Configuration menu
    Copy the full SHA
    f15c650 View commit details
    Browse the repository at this point in the history

  5. run separate credscan task

    @miniksa
    miniksa committed Dec 7, 2021
    1 Configuration menu
    Copy the full SHA
    f289a67 View commit details
    Browse the repository at this point in the history

  6. ok that was too sneaky. use comments instead.

    @miniksa
    miniksa committed Dec 7, 2021
    1 Configuration menu
    Copy the full SHA
    1b9ee5a View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2021

  1. suppress suppression file while we don't have anything to suppress

    @miniksa
    miniksa committed Dec 8, 2021
    1 Configuration menu
    Copy the full SHA
    49f1f4b View commit details
    Browse the repository at this point in the history

Commits on Dec 9, 2021

  1. try to fix cfgcheck

    @miniksa
    miniksa committed Dec 9, 2021
    1 Configuration menu
    Copy the full SHA
    e5e3c63 View commit details
    Browse the repository at this point in the history

  2. don't policheck generated winrt files

    @miniksa
    miniksa committed Dec 9, 2021
    1 Configuration menu
    Copy the full SHA
    8f4e322 View commit details
    Browse the repository at this point in the history

  3. try to fix cfg?

    @miniksa
    miniksa committed Dec 9, 2021
    1 Configuration menu
    Copy the full SHA
    b162280 View commit details
    Browse the repository at this point in the history

  4. ok how about this directory, policheck? chew on that!

    @miniksa
    miniksa committed Dec 9, 2021
    1 Configuration menu
    Copy the full SHA
    ec4db65 View commit details
    Browse the repository at this point in the history

  5. exclude more from policheck that doesn't make sense

    @miniksa
    miniksa committed Dec 9, 2021
    1 Configuration menu
    Copy the full SHA
    cd0db77 View commit details
    Browse the repository at this point in the history

  6. ok here goes nothing

    @miniksa
    miniksa committed Dec 9, 2021
    1 Configuration menu
    Copy the full SHA
    9d7406a View commit details
    Browse the repository at this point in the history

Commits on Dec 13, 2021

  1. make compliance run in parallel

    @miniksa
    miniksa committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    6650747 View commit details
    Browse the repository at this point in the history

  2. a leftover

    @miniksa
    miniksa committed Dec 13, 2021
    Configuration menu
    Copy the full SHA
    a9c80cb View commit details
    Browse the repository at this point in the history

  3. Merge branch 'main' into dev/miniksa/compliance

    @miniksa
    miniksa committed Dec 13, 2021
    1 Configuration menu
    Copy the full SHA
    9dabd54 View commit details
    Browse the repository at this point in the history

  4. syntax error

    @miniksa
    miniksa committed Dec 13, 2021
    1 Configuration menu
    Copy the full SHA
    51b5edd View commit details
    Browse the repository at this point in the history

  5. its shallow isn't it

    @miniksa
    miniksa committed Dec 13, 2021
    1 Configuration menu
    Copy the full SHA
    2b3d732 View commit details
    Browse the repository at this point in the history

  6. flag it on and off

    @miniksa
    miniksa committed Dec 13, 2021
    1 Configuration menu
    Copy the full SHA
    b5290a7 View commit details
    Browse the repository at this point in the history

  7. flip checks around again

    @miniksa
    miniksa committed Dec 13, 2021
    1 Configuration menu
    Copy the full SHA
    81fc0ff View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2021

  1. spell check!

    @miniksa
    miniksa committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    8e7fd87 View commit details
    Browse the repository at this point in the history

  2. work around compiler crash when working with these lambdas in a macro… 

    … with static analysis enabled
    @miniksa
    miniksa committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    2cb310d View commit details
    Browse the repository at this point in the history

  3. code format

    @miniksa
    miniksa committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    b461264 View commit details
    Browse the repository at this point in the history

  4. extend timeout

    @miniksa
    miniksa committed Dec 14, 2021
    Configuration menu
    Copy the full SHA
    7d365e9 View commit details
    Browse the repository at this point in the history

  5. back to xfg

    @miniksa
    miniksa committed Dec 14, 2021
    1 Configuration menu
    Copy the full SHA
    5c402de View commit details
    Browse the repository at this point in the history

Commits on Dec 15, 2021

  1. add binskim explicitly?

    @miniksa
    miniksa committed Dec 15, 2021
    1 Configuration menu
    Copy the full SHA
    fc7b009 View commit details
    Browse the repository at this point in the history

  2. Add a lot of commentary and try to fix binskim search patterns

    @miniksa
    miniksa committed Dec 15, 2021
    1 Configuration menu
    Copy the full SHA
    140227d View commit details
    Browse the repository at this point in the history

  3. adjust binskim pattern

    @miniksa
    miniksa committed Dec 15, 2021
    1 Configuration menu
    Copy the full SHA
    0644e12 View commit details
    Browse the repository at this point in the history

  4. Revert "back to xfg" 

    This reverts commit 5c402de.
    @miniksa
    miniksa committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    b880244 View commit details
    Browse the repository at this point in the history

  5. note

    @miniksa
    miniksa committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    567a0ba View commit details
    Browse the repository at this point in the history

  6. spellcheck

    @miniksa
    miniksa committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    510b8dd View commit details
    Browse the repository at this point in the history

  7. Merge branch 'main' into dev/miniksa/compliance

    @miniksa
    miniksa committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    7bcb698 View commit details
    Browse the repository at this point in the history

  8. need to restore pgo step too

    @miniksa
    miniksa committed Dec 15, 2021
    Configuration menu
    Copy the full SHA
    40381eb View commit details
    Browse the repository at this point in the history

Commits on Jan 4, 2022

  1. separate out compliance job, I think?

    @miniksa
    miniksa committed Jan 4, 2022
    Configuration menu
    Copy the full SHA
    c641dee View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into dev/miniksa/compliance

    @miniksa
    miniksa committed Jan 4, 2022
    Configuration menu
    Copy the full SHA
    e1e7cbd View commit details
    Browse the repository at this point in the history