* This PR migrates the WinGetSVC validation pipeline to 1ES, including changes to the following files:
validation-pipeline.yaml
The winget-pkgs repo was updated with the changes from the winget-pkgs-preprod repo, which had been merged from the pipeline staging process through PR. This manual copying was necessary because the automatic deployment failed for the production pipeline.
[How Validated:]
The changes have been validated against the preprod environment by manually triggering the pipeline and ensuring successful runs.
[Important Note:]
During our last deployment, we discovered that the validation process encountered a failure in the SDL Source, caused by a permission issue with a task automatically injected by the 1ES pipeline. This issue occurred when the pipeline ran on PR commits from fork branches created by community contributors external to Microsoft. We have reported the issue to the 1ES team and are actively engaging with them to find a resolution. Until then, this PR will be kept in a draft state.
* Apply SkipBuildTagsForGitHubPullRequests workaround fix to resolve Tag build and log custom issues (1ES PT) with Access denied error
1ES PT uses ADO access token to add tags to pipeline runs. For forked GitHub repo pipelines, access token lacks Edit build quality permission, preventing tag addition. Use SkipBuildTagsForGitHubPullRequests option to unblock
* This PR migrates the WinGetSVC rebuild pipeline to 1ES, including changes to the following files:
- rebuild-pipeline.yaml
The winget-pkgs repo was updated with the changes from the winget-pkgs-preprod repo, which had been merged from the pipeline staging process through PR. This manual copying was necessary because the automatic deployment failed for the production pipeline.
[How Validated:]
The changes have been validated against the preprod environment by manually triggering the pipeline and ensuring successful runs.
* Improve consistency of pipeline stage names
This commit updates the pipeline stage names to be more consistent across all pipelines. This change improves the readability of the pipeline code.
* This PR migrates the WinGetSVC Rebuild Rest pipeline to 1ES, including changes to the following files:
- rebuild-rest-pipeline.yaml
The winget-pkgs repo was updated with the changes from the winget-pkgs-preprod repo, which had been merged from the pipeline staging process through PR. This manual copying was necessary because the automatic deployment failed for the production pipeline.
[How Validated:]
- The changes have been validated against the preprod environment by manually triggering the pipeline and ensuring successful runs.
WinGetSvc-Publish-ppe
* Improve consistency of pipeline stage names
This commit updates the pipeline stage names to be more consistent across all pipelines. This change improves the readability of the pipeline code.
* Migrate WinGetSVC Publish pipeline to 1ES
- Updated publish-pipeline.yaml to use 1ES changes
- Manually copied changes from winget-pkgs-preprod repo to winget-pkgs repo due to failed automatic deployment
[How Validated:]
- Validated changes against preprod environment by manually triggering pipeline
- Ensured successful runs of WinGetSvc-Publish-ppe from last deployment attempt.
* Improve consistency of pipeline stage names
This commit updates the pipeline stage names to be more consistent across all pipelines. This change improves the readability of the pipeline code.
* Migrate WinGetSVC pipeline to 1ES
This commit includes all the 1ES pipeline migration changes that are working in winget-pkgs-preprod
manually copied to winget-pkgs repo as some issue in automatic deployment didn't bring this changes
automatically.
This commit migrates the WinGetSVC pipeline to 1ES, including changes to the following files:
- publish-pipeline.yaml
- rebuild-pipeline.yaml
- rebuild-rest-pipeline.yaml
- validation-pipeline.yaml
The changes were manually copied from the winget-pkgs-preprod repo to the winget-pkgs repo due to an issue with automatic deployment.
[How Validated:]
- The changes have been validated against the preprod environment by manually triggering the pipeline and ensuring successful runs.
* Improve consistency of pipeline stage names
This commit updates the pipeline stage names to be more consistent across all pipelines. This change improves the readability of the pipeline code.
This PR migrates the following WinGet-Pkgs cg-pipeline pipelines to 1ESPipeline
- cg-pipeline.yaml
Co-authored-by: Madhusudhan Gumbalapura Sudarshan <Madhusudhan.Sudarshan@microsoft.com>
* [WinGet-Pkgs] WinGet-Pkgs cg-pipeline.yaml migration to 1ESPipeline
This PR migrates the following WinGet-Pkgs cg-pipeline pipelines to 1ESPipeline
- cg-pipeline.yaml
* Bring back ComponentGovernanceComponentDetection task.
- The previous pipeline run, which can be found at the provided Azure DevOps link:
https://dev.azure.com/ms/winget-pkgs/_build/results?buildId=507609&view=logs&j=bc38e8b8-e027-53cb-48e7-2adbd1070eca&t=dda153aa-3164-5f35-5796-224fc6cb32ec
includes
sdl:
componentgovernance:
failOnAlert: true
This indicates that Component Detection is auto-injected, but there is no indication of a Component Governance run.
Therefore, the ComponentGovernanceComponentDetection task is being brought back to maintain parity with old pipeline runs.
* Fix 'Stage' property value to meet naming restrictions
---------
Co-authored-by: Madhusudhan Gumbalapura Sudarshan <Madhusudhan.Sudarshan@microsoft.com>
wingetbot