From f30a365fcc0c8fe0525288cb7a03f66c162917d2 Mon Sep 17 00:00:00 2001 From: ramsessanchez <63934382+ramsessanchez@users.noreply.github.com> Date: Thu, 14 May 2026 13:29:23 -0700 Subject: [PATCH 1/3] chore: add DevOps build pipeline for S360 security vulnerability scanning Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .azurepipelines/build.yml | 49 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 .azurepipelines/build.yml diff --git a/.azurepipelines/build.yml b/.azurepipelines/build.yml new file mode 100644 index 0000000000..033d4f3bf2 --- /dev/null +++ b/.azurepipelines/build.yml @@ -0,0 +1,49 @@ +trigger: none +pr: none + +schedules: + - cron: '0 0 * * 1,3' + displayName: Monday and Wednesday builds + branches: + include: + - main + always: true + +resources: + repositories: + - repository: 1ESPipelineTemplates + type: git + name: 1ESPipelineTemplates/1ESPipelineTemplates + ref: refs/tags/release + +extends: + template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates + parameters: + pool: + name: Azure-Pipelines-1ESPT-ExDShared + os: linux + stages: + - stage: Build + jobs: + - job: Build + displayName: Build TypeScript Beta SDK + steps: + - checkout: self + submodules: recursive + + - task: NodeTool@0 + displayName: Set up Node.js + inputs: + versionSpec: '20.x' + + - script: npm ci + displayName: Install dependencies + workingDirectory: $(Build.SourcesDirectory) + + - script: npm run build --workspaces + displayName: Build SDK + workingDirectory: $(Build.SourcesDirectory) + + - script: npm test + displayName: Run unit tests + workingDirectory: $(Build.SourcesDirectory) From 47576fb41c918adf2a7eac7d634b4acf699c3b43 Mon Sep 17 00:00:00 2001 From: ramsessanchez <63934382+ramsessanchez@users.noreply.github.com> Date: Thu, 14 May 2026 14:48:05 -0700 Subject: [PATCH 2/3] chore: update build pipeline schedule to daily Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .azurepipelines/build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.azurepipelines/build.yml b/.azurepipelines/build.yml index 033d4f3bf2..cbc649607f 100644 --- a/.azurepipelines/build.yml +++ b/.azurepipelines/build.yml @@ -2,8 +2,8 @@ trigger: none pr: none schedules: - - cron: '0 0 * * 1,3' - displayName: Monday and Wednesday builds + - cron: '0 0 * * *' + displayName: Daily builds branches: include: - main From 6696e2305fc87d511e3af61190bb3d0525b8e4d7 Mon Sep 17 00:00:00 2001 From: ramsessanchez <63934382+ramsessanchez@users.noreply.github.com> Date: Thu, 14 May 2026 15:22:49 -0700 Subject: [PATCH 3/3] chore: enable SDL security scanning in build pipeline Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .azurepipelines/build.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.azurepipelines/build.yml b/.azurepipelines/build.yml index cbc649607f..5a76b71f43 100644 --- a/.azurepipelines/build.yml +++ b/.azurepipelines/build.yml @@ -22,6 +22,17 @@ extends: pool: name: Azure-Pipelines-1ESPT-ExDShared os: linux + sdl: + sourceAnalysisPool: + name: Azure-Pipelines-1ESPT-ExDShared + image: windows-2022 + os: windows + credscan: + enabled: true + policheck: + enabled: true + binskim: + enabled: true stages: - stage: Build jobs: