Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug 55435589: MrtCore build now fails due to mrt.gdnsuppress exclusions not being found, due to case sensitive of nuget package cache #4951

Merged
merged 4 commits into from
Dec 10, 2024

Conversation

alexlamtest
Copy link
Contributor

The Packages folder contain binaries that are from external sources.
We've applied the policy of "each repo should focus on scanning its own binaries" to most other repos, so adding exclusion of the Packages folder to skip BinSkim scans on the Foundation repo.

How verified:

  • A private pipeline run shows the Build Stage is successful (no BinSkim errors) with the changes in this PR.

/////

A microsoft employee must use /azp run to validate using the pipelines below.

WARNING:
Comments made by azure-pipelines bot maybe inaccurate.
Please see pipeline link to verify that the build is being ran.

For status checks on the main branch, please use TransportPackage-Foundation-PR
(https://microsoft.visualstudio.com/ProjectReunion/_build?definitionId=81063&_a=summary)
and run the build against your PR branch with the default parameters.

@alexlamtest
Copy link
Contributor Author

/azp run

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@alexlamtest alexlamtest changed the title [Build] Skip the Packages folder when performing BinSkim scans Bug 55435589: MrtCore build now fails due to mrt.gdnsuppress exclusions not being found, due to case sensitive of nuget package cache Dec 10, 2024
@@ -86,6 +86,7 @@ extends:
binskim:
enabled: true
break: true
analyzeTargetGlob: +:f|**.exe;+:f|**.dll;-:f|**\packages\**\*.dll;-:f|**\packages\**\*.exe
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ironic that analyzeTargetGlob is itself case-insensitive!

Copy link
Member

@Scottj1s Scottj1s left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks!

@alexlamtest alexlamtest enabled auto-merge (squash) December 10, 2024 18:42
@alexlamtest alexlamtest merged commit ed94e7e into main Dec 10, 2024
26 checks passed
@alexlamtest alexlamtest deleted the user/alexlam/BinSkimFix-main-20241209 branch December 10, 2024 20:29
godlytalias pushed a commit that referenced this pull request Dec 13, 2024
…ns not being found, due to case sensitive of nuget package cache (#4951)

* Snapshot 1

* Update WindowsAppSDK-Foundation-Nightly.yml

* Update WindowsAppSDK-Foundation-Official.yml

* Update WindowsAppSDK-Foundation-PR.yml
codendone pushed a commit that referenced this pull request Jan 10, 2025
…ns not being found, due to case sensitive of nuget package cache (#4951)

* Snapshot 1

* Update WindowsAppSDK-Foundation-Nightly.yml

* Update WindowsAppSDK-Foundation-Official.yml

* Update WindowsAppSDK-Foundation-PR.yml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants