Wave 2: Code Sign Validation Enforcement for 1ES Template - Githubissues

microsoft / PTVS

Python Tools for Visual Studio

https://aka.ms/PTVS

Apache License 2.0

2.53k stars 676 forks source link

Wave 2: Code Sign Validation Enforcement for 1ES Template #7994

Closed AdamYoblick closed 3 weeks ago

AdamYoblick commented 1 month ago

See e-mail with the above title.

Also see https://microsoft-my.sharepoint.com/:x:/p/marcklim/EQifbVgIrr5GmpyPkxH1gKABV4snEzg7gV0xZgJvEzmWAQ?e=ZoNb5h&nav=MTVfezA1RjMzNUQ3LTAxMTctNEU0NC05RUQzLTZDMDU2Q0NEMzI5Nn0&clickparams=eyAiWC1BcHBOYW1lIiA6ICJNaWNyb3NvZnQgT3V0bG9vayIsICJYLUFwcFZlcnNpb24iIDogIjE2LjAuMTgwMjUuMjAwMzAiLCAiT1MiIDogIldpbmRvd3MiIH0%3D&CID=A0B69B88-33E6-4A8B-97BC-A7856C436883&wdLOR=c5C422B7E-7CEC-4339-A0FB-EA4328666FF8 and search for "Python"

Need to investigate what we need to do for PTVS and debugpy, then do the same for pylance (or share the work).

AdamYoblick commented 3 weeks ago

To disable this for a specific stage or job, see https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/codesignvalidation#option-to-disable-csv-in-different-levels. I've done this for both debugpy (for the unsigned wheels) and for PTVS (for the vs bootstrapper).