Configure SBOM as 1ES PT pipeline artifacts #6280

donnie-msft · 2025-02-20T00:13:49Z

Bug

Fixes:

Enable SBOM as part of the 1ES pipeline templates (1ES PT) for our official builds.
Remove custom scripts and paths that were previously generating the SBOM.
Enable Feature Flag enablePrepareFilesForSbom since we create a single-file VSIX with an SBOM.
TODO: does vsmanproj still need to merge the manifests or is SBOM expected to be a separate manifest?

Meaningful title, helpful description and a linked NuGet/Home issue
Added tests
Link to an issue or pull request to update docs if this PR changes settings, environment variables, new feature, etc.

donnie-msft force-pushed the dev-donnie-msft-genSbom branch from c496612 to 000b9fe Compare February 25, 2025 23:51

donnie-msft added 9 commits February 26, 2025 12:57

Remove custom SBOM code

a5e35f9

Remove more custom sbom

91fb7fb

Temporarily enable sbom in PR runs

5713c8d

Try sbomBuildDropPath

24d0016

More sbomBuildDropPath

7e83452

Enable enablePrepareFilesForSbom and set all sbom paths

b8ffc35

fix nuget.sln

3c25d3f

Undo vsmanproj

cf38bcf

Put back MAnifestDirPath and publish SBOM

a79d9af

donnie-msft force-pushed the dev-donnie-msft-genSbom branch from 000b9fe to a79d9af Compare February 26, 2025 21:11