microsoft / microsoft/AdaptiveCards
[All] Updates to release pipelines to support Executive Order
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 2k
- Forks
- 595
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 1
Description
Description
We need to review our release pipelines across all publicly shipping platforms to make sure that we're compliant with new requirements in support of President Biden's Executive Order.
In particular, we need to make sure we're fulfilling requirements outlined here. Most of the difficult parts should already be wrapped up in PackageES tasks we can use -- we just need to wire everything up and make sure we're following SDL guidance.
Useful context for SBOM work here.
Reference
Tasks
UWP
- #6820
- #6821
.NET Templating
- #6822
- #6823
Android
- #6824
- #6825
iOS
- #6826
- #6827
NodeJS
- #6828
- #6829
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing child issues #6820-#6829 and the referenced 1ES SBOM and PackageES security tasks. Map the UWP, .NET templating, Android, iOS, and NodeJS release pipelines to the listed Executive Order requirements and SDL guidance; done means each platform pipeline has the required compliance wiring.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, csharp, ios, nodejs
- Domain
- ci-cd, devops, release, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100