Comments (5)
Understand whether we still need to generate SBOMs with our own templates or can solely rely on the template injected sbom generation. This might not be possible, as the Microbuild guidance is to keep using the manifest generator task...
if we keep our own SBOM task then we need to bump the package version since it wasn't bumped in main: #14511
from arcade.
Adding a few more items
-
Clean up any conditional that mentions running a PR, running as public, or running in the public project
-
Understand whether we still need to generate SBOMs with our own templates or can solely rely on the template injected sbom generation. This might not be possible, as the Microbuild guidance is to keep using the manifest generator task...
SBOM: The Migration Tooling will remove the SBOM Manifest Builder Task. Please put this back. The SBOM tasks in the 1ES PT does not conform to the way that we package up SBOM's into manifest files in MicroBuild.
from arcade.
re the CodeQL point: parameters.PackageVersion
is a lousy name anyhow. we should at least fix that if the hook is still needed
from arcade.
As a more general cleanup point:
- the public templates should only do public things
- the official templates should only do official things
from arcade.
Understand whether we still need to generate SBOMs with our own templates or can solely rely on the template injected sbom generation. This might not be possible, as the Microbuild guidance is to keep using the manifest generator task...
if we keep our own SBOM task then we need to bump the package version since it wasn't bumped in main: #14511
Especially because a certain @riarenas said we shouldn't update it in main yet😛
from arcade.
Related Issues (20)
- Delete promote-build.yml in release branches HOT 3
- Move publishing back to netcore1espool-publishing-internal for the 1ES official templates HOT 1
- [1ES Template] Migrate dotnet-migrate-packages HOT 2
- [1ES Template] Migrate Core mirror HOT 1
- Update arcade-validation to use windows 11 helix queues over windows 10. HOT 2
- Updates to the docker eol report HOT 1
- Allow building with newer clang versions without changing init-compilers.sh. HOT 1
- RemoteExecutor field marshaling failure when in Live Unit Testing HOT 1
- Delete Validate Publishing in arcade-validation HOT 2
- "5 new packages used not in baseline!" after pulling the latest arcade from .Net 7 Eng channel HOT 23
- [Build Analysis] GitHub Throttling issues
- Update MicroBuildSigningPlugin to version 4 HOT 2
- Fix up devdiv pool usage in official arcade templates HOT 7
- Remove `-pt` image use HOT 2
- CA2022 error in src/SignCheck/Microsoft.SignCheck/Verification/LZMAUtils.cs
- Tools.csproj makes it hard to use central package management HOT 3
- Determine why SB break wasn't caught in arcade-validation
- Change the default dotnet installation location from `.dotnet/` to `.dotnet/$hostRid/` HOT 4
- Arcade incorrectly determines NuGet cache location HOT 1
- When NetPrevious is set to empty, some projects have unexpected behavior HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from arcade.