Disable CSV for bootstrapper since we don't ship it (#7999)

* Disable CSV for bootstrapper since we don't ship it * Move csv exclusion to entire job since we publish lots of unsigned artifacts * Fix NugetAuthenticate warnings
microsoft · Sep 23, 2024 · a4a25cf · a4a25cf
1 parent 436d1da
commit a4a25cf
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/Build/templates/restore_packages.yml b/Build/templates/restore_packages.yml
@@ -18,7 +18,7 @@ parameters:
 steps:
 
   # nuget authenticate so we can restore from azure artifacts
-  - task: NuGetAuthenticate@0
+  - task: NuGetAuthenticate@1
     displayName: 'NuGet Authenticate'
 
   # npm authenticate so we can restore from azure artifacts

diff --git a/azure-pipelines.yml b/azure-pipelines.yml
@@ -116,6 +116,11 @@ extends:
         # If the pipeline publishes artifacts, use `templateContext` to define the artifacts.
         # This will enable 1ES PT to run SDL analysis tools on the artifacts and then upload them.
         templateContext:
+          # Disable code signing validation because we don't ship ANY of the artifacts that we publish.
+          # The only released artifacts are uploaded via the 1ES.MicroBuildVstsDrop@1 below.
+          sdl:
+            codeSignValidation:
+              enabled: false
           outputs:
           - output: pipelineArtifact
             displayName: 'Publish build artifact: binaries'