Move to OneBranch Signing and SBOM generation by TravisEz13 · Pull Request #1982 · PowerShell/PSScriptAnalyzer · GitHub

PR Summary

Move to OneBranch Pipelines (OBP) signing
Move to OBP SBOM generation
- Fix issues with SBOM generation (missing name and version)
Move to newest OBP container
Add nupkg signing (future use)

PR has a meaningful title
- Use the present tense and imperative mood when describing your changes
Summarized changes
Change is not breaking
Make sure all .cs, .ps1 and .psm1 files have the correct copyright header
Make sure you've added a new test if existing tests do not effectively test the code changed and/or updated documentation
This PR is ready to merge and is not Work in Progress.
- If the PR is work in progress, please add the prefix WIP: to the beginning of the title and remove the prefix when the PR is ready.

This reverts commit 1bdc123.

Aditya Patwardhan (adityapatwardhan) and others added 30 commits March 13, 2024 10:44

Updates to signing

1ed48b1

fix files to sign

b74f202

sbom changes

9a24c68

format changes

b9cdd49

Make packaging wait on build

83cc690

clarify task display names

ed91b82

Make sure signing is setup

80473e2

move other tasks to restore phase

18232e3

move checkout to restore phase

a570c56

update container

4331d7b

move signing to it's own job

473498e

add flag required for newest container

4330f12

clarify copy files task displaynames

1bdc123

reuse existing variable

3d2c9dd

removed unneeded code

a9cadb3

Use correct path is signing job

dd9e7a6

sign the nupkg

5062efd

fix syntax

1465ca9

Revert "clarify copy files task displaynames"

fa48f5d

This reverts commit 1bdc123.

Disable code sign validation on first job

9c1cfad

search for where OBP put dotnet.exe

d5d03f0

Move SDK search to it's own job

f3ef9e7

delete SDK search

ac44341

make nupkg signing a todo

440ceb6

fix nupkg publishing

9c65c5b

try disabling codeql to get signing working per docs

663f093

don't setup signing where not needed

1ed8039

combine sign and build job

a03237d

set version for SBOM

504c5df

make comments more accurate

dd8c136

Travis Plunk (TravisEz13) commented Mar 14, 2024

View reviewed changes

Comment thread .pipelines/OSS_Microsoft_PSSA-Official.yml

Travis Plunk (TravisEz13) commented Mar 14, 2024

View reviewed changes