Skip to content

fix: route npm install through Azure Artifacts feed in release pipeline#984

Merged
jingjingjia-ms merged 1 commit into
mainfrom
fix/release-pipeline-network-isolation
May 8, 2026
Merged

fix: route npm install through Azure Artifacts feed in release pipeline#984
jingjingjia-ms merged 1 commit into
mainfrom
fix/release-pipeline-network-isolation

Conversation

@jingjingjia-ms
Copy link
Copy Markdown
Contributor

@jingjingjia-ms jingjingjia-ms commented May 7, 2026

The release was failing at npm ci because 1ES network isolation policy blocks direct outbound connection to public registry. Created an azure artifact feed with npm registry as upstream source.

I didn't use a .npmrc file pointing to the feed as external contributors won't be able to authenticate during development.

The 1ESPT CFSClean network isolation policy now enforces on Linux agents,
blocking direct access to registry.npmjs.org. Use the Npm@1 task's built-in
customRegistry/customFeed support to route through the msgraph-typescript
Azure Artifacts feed (with npmjs upstream) instead.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jingjingjia-ms jingjingjia-ms marked this pull request as ready for review May 7, 2026 23:51
@jingjingjia-ms jingjingjia-ms requested a review from a team as a code owner May 7, 2026 23:51
@jingjingjia-ms jingjingjia-ms merged commit cc92832 into main May 8, 2026
15 checks passed
@jingjingjia-ms jingjingjia-ms deleted the fix/release-pipeline-network-isolation branch May 8, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants