This PR adds the basic "build and sign" pipeline to migrate DTFx.Core, DTFx.AS, and DTFx.AI to 1ES.
A few cut corners to address in a future follow-up:
the SBOM parameters need further scrutiny, it's possible it is not analyzing the right data
The build pipeline isn't building ServiceBus and ServiceFabric (it's commented out in the yml for that reason). It's unclear if we want to do that in the Azure Functions-managed 1ES pipeline
warning CS7035 is being suppressed, which calls out that our assembly version format doesn't follow conventions. Example: ": Error CS7035: The specified version string '2.17.1.167958' does not conform to the recommended format - major.minor.build.revision".
Integration tests aren't included yet. This is just building and signing the code.
CodeQL integration still missing
Still a few warnings in the pipeline that deserve scrutiny
This PR adds the basic "build and sign" pipeline to migrate DTFx.Core, DTFx.AS, and DTFx.AI to 1ES.
A few cut corners to address in a future follow-up: