dotnet / sign

Code Signing CLI tool supporting Authenticode, NuGet, VSIX, and ClickOnce
MIT License
447 stars 84 forks source link

CI: add baselines for SDL tooling #680

Closed dtivel closed 3 months ago

dtivel commented 3 months ago

Resolve https://github.com/dotnet/sign/issues/676

This PR adds a file which was automatically generated by SDL tooling after migrating the official pipeline to 1ES. These files are necessary for the SDL tools to mark violations appropriately. For more details, see: https://aka.ms/1espt-autobaselining.

I added README.md to alert maintainers on the risk of accepting (merging) autogenerated PR's raised by the same SDL tooling.

Reference PR: https://github.com/dotnet/installer/pull/19127