add back the nuget security analysis for OSSBuild

This commit is contained in:
Tian Liao 2023-10-27 14:04:04 +08:00
commit 74480216b0
2 changed files with 9 additions and 0 deletions

View file

@ -40,21 +40,25 @@ extends:
- template: /build/pipelines/templates/build-single-architecture.yaml@self - template: /build/pipelines/templates/build-single-architecture.yaml@self
parameters: parameters:
platform: x64 platform: x64
isOSSBuild: true
- template: /build/pipelines/templates/build-single-architecture.yaml@self - template: /build/pipelines/templates/build-single-architecture.yaml@self
parameters: parameters:
platform: x86 platform: x86
condition: not(eq(variables['Build.Reason'], 'PullRequest')) condition: not(eq(variables['Build.Reason'], 'PullRequest'))
isOSSBuild: true
- template: /build/pipelines/templates/build-single-architecture.yaml@self - template: /build/pipelines/templates/build-single-architecture.yaml@self
parameters: parameters:
platform: ARM platform: ARM
condition: not(eq(variables['Build.Reason'], 'PullRequest')) condition: not(eq(variables['Build.Reason'], 'PullRequest'))
isOSSBuild: true
- template: /build/pipelines/templates/build-single-architecture.yaml@self - template: /build/pipelines/templates/build-single-architecture.yaml@self
parameters: parameters:
platform: ARM64 platform: ARM64
condition: not(eq(variables['Build.Reason'], 'PullRequest')) condition: not(eq(variables['Build.Reason'], 'PullRequest'))
isOSSBuild: true
- template: /build/pipelines/templates/run-ui-tests.yaml@self - template: /build/pipelines/templates/run-ui-tests.yaml@self
parameters: parameters:

View file

@ -2,6 +2,7 @@
parameters: parameters:
isReleaseBuild: false isReleaseBuild: false
isOSSBuild: false
useReleaseAppxManifest: false useReleaseAppxManifest: false
platform: '' platform: ''
condition: '' condition: ''
@ -42,6 +43,10 @@ jobs:
- checkout: self - checkout: self
fetchDepth: 1 fetchDepth: 1
- ${{ if eq(parameters.isOSSBuild, true) }}:
- task: nuget-security-analysis@0
displayName: Secure Supply Chain Analysis
- ${{ if eq(parameters.isReleaseBuild, true) }}: - ${{ if eq(parameters.isReleaseBuild, true) }}:
- task: UniversalPackages@0 - task: UniversalPackages@0
displayName: Download internals package displayName: Download internals package