security/pipeline compliance (#4137)

* - removes older compliance tasks

Signed-off-by: Vincent Biret <[email protected]>

* - adds the 1es template

Signed-off-by: Vincent Biret <[email protected]>

* - replaces forbidden tasks

Signed-off-by: Vincent Biret <[email protected]>

* - fixes parameters for publish artifact tasks

Signed-off-by: Vincent Biret <[email protected]>

* - fixes task version

Signed-off-by: Vincent Biret <[email protected]>

* - switches to the required pool

Signed-off-by: Vincent Biret <[email protected]>

* - fixes os name to 1es accepted values

Signed-off-by: Vincent Biret <[email protected]>

* - removes linux agent where possible

Signed-off-by: Vincent Biret <[email protected]>

* - adds note for conversion requirement

Signed-off-by: Vincent Biret <[email protected]>

* - switches to a loop due to 1es limitations

Signed-off-by: Vincent Biret <[email protected]>

* - typo fix

Signed-off-by: Vincent Biret <[email protected]>

* - fixes depends on condition

Signed-off-by: Vincent Biret <[email protected]>

* - adds baseline suppression for app settings stage

Signed-off-by: Vincent Biret <[email protected]>

* - moves the pool to the jobs only

Signed-off-by: Vincent Biret <[email protected]>

* - adds windows pool for source analysis

Signed-off-by: Vincent Biret <[email protected]>

* - adds image information

Signed-off-by: Vincent Biret <[email protected]>

* - adds baseline for all checkout jobs

Signed-off-by: Vincent Biret <[email protected]>

* - fixes indent

Signed-off-by: Vincent Biret <[email protected]>

* - switches macOS steps to regular pipeline pool

Signed-off-by: Vincent Biret <[email protected]>

* - switches to configurable preview branch

Signed-off-by: Vincent Biret <[email protected]>

* - fixes reference to parameter

Signed-off-by: Vincent Biret <[email protected]>

* - fixes condition

Signed-off-by: Vincent Biret <[email protected]>

* - adds missing quotes

Signed-off-by: Vincent Biret <[email protected]>

* - disambiguates artifact upload

Signed-off-by: Vincent Biret <[email protected]>

* - adds iteration over binaries download in deploy step

Signed-off-by: Vincent Biret <[email protected]>

* - indent fix

Signed-off-by: Vincent Biret <[email protected]>

* - improves download titles

Signed-off-by: Vincent Biret <[email protected]>

* - adds request package parent path for compliance

Signed-off-by: Vincent Biret <[email protected]>

* - adds missing SBOM source

Signed-off-by: Vincent Biret <[email protected]>

---------

Signed-off-by: Vincent Biret <[email protected]>