Don't manually run SDL checks that 1ES pipelines inject when using 1ES pipelines

dotnet / arcade

Tools that provide common build infrastructure for multiple .NET Foundation projects.

MIT License

657 stars 331 forks source link

Don't manually run SDL checks that 1ES pipelines inject when using 1ES pipelines #14872

Closed jkoritzinsky closed 1 day ago

jkoritzinsky commented 1 week ago

Right now we're running CG and SBOM generation twice per job due to 1ES injecting it and Arcade manually including the tasks as well, resulting in many duplicate AzDO warnings, slower builds, and more confusing logs.