CI: add baselines for SDL tooling (#680)

Resolve #676.
dotnet · Mar 29, 2024 · 8ed65da · 8ed65da
1 parent 394fddf
commit 8ed65da
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/.config/1espt/PipelineAutobaseliningConfig.yml b/.config/1espt/PipelineAutobaseliningConfig.yml
@@ -0,0 +1,21 @@
+## DO NOT MODIFY THIS FILE MANUALLY. This is part of auto-baselining from 1ES Pipeline Templates. Go to [https://aka.ms/1espt-autobaselining] for more details.
+
+pipelines:
+  1190:
+    retail:
+      source:
+        credscan:
+          lastModifiedDate: 2024-03-28
+        eslint:
+          lastModifiedDate: 2024-03-28
+        psscriptanalyzer:
+          lastModifiedDate: 2024-03-28
+        armory:
+          lastModifiedDate: 2024-03-28
+      binary:
+        credscan:
+          lastModifiedDate: 2024-03-28
+        binskim:
+          lastModifiedDate: 2024-03-28
+        spotbugs:
+          lastModifiedDate: 2024-03-28
diff --git a/.config/1espt/README.md b/.config/1espt/README.md
@@ -0,0 +1,3 @@
+Do not merge changes to PipelineAutobaseliningConfig.yml in the internal Azure DevOps repository, as it would break commit mirroring from the public GitHub repository.  Instead, merge the changes into the public GitHub repository.
+
+See https://dev.azure.com/dnceng/internal/_wiki/wikis/DNCEng%20Services%20Wiki/1214/1ES-Pipeline-Template-Migration-FAQ?anchor=should-i-accept-these-automated-prs-into-my-repo-that-is-mirrored-from-github-to-fix-cg/security-issues%3F for guidance.
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		Do not merge changes to PipelineAutobaseliningConfig.yml in the internal Azure DevOps repository, as it would break commit mirroring from the public GitHub repository. Instead, merge the changes into the public GitHub repository.

		See https://dev.azure.com/dnceng/internal/_wiki/wikis/DNCEng%20Services%20Wiki/1214/1ES-Pipeline-Template-Migration-FAQ?anchor=should-i-accept-these-automated-prs-into-my-repo-that-is-mirrored-from-github-to-fix-cg/security-issues%3F for guidance.