From a59a3903a5cff47eb66c020490ca08853988d26b Mon Sep 17 00:00:00 2001 From: Nick Banks Date: Tue, 12 Mar 2024 14:25:18 -0400 Subject: [PATCH] Enable SPGO for OneBranch Builds (#4189) --- .azure/obtemplates/build-winkernel.yml | 1 + .azure/obtemplates/build-winuser.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.azure/obtemplates/build-winkernel.yml b/.azure/obtemplates/build-winkernel.yml index e3e784545d..0c0d406db9 100644 --- a/.azure/obtemplates/build-winkernel.yml +++ b/.azure/obtemplates/build-winkernel.yml @@ -11,6 +11,7 @@ jobs: ob_outputDirectory: $(Build.SourcesDirectory)\artifacts\bin\winkernel ob_sdl_binskim_break: true # https://aka.ms/obpipelines/sdl ob_sdl_codeSignValidation_excludes: -|**\*.sys # Disable signing requirements for KM builds + ob_spgo_enabled: true # Enable SPGO steps: - script: scripts\onebranch-build-kernel.cmd ${{ parameters.config }} x64 displayName: x64 diff --git a/.azure/obtemplates/build-winuser.yml b/.azure/obtemplates/build-winuser.yml index 0ae29f3cb0..6d15f4485e 100644 --- a/.azure/obtemplates/build-winuser.yml +++ b/.azure/obtemplates/build-winuser.yml @@ -12,6 +12,7 @@ jobs: ob_outputDirectory: $(Build.SourcesDirectory)\artifacts\bin\${{ parameters.platform }} ob_sdl_binskim_break: true # https://aka.ms/obpipelines/sdl ob_sdl_codeSignValidation_excludes: -|**\*.exe # Disable signing requirements for test executables + ob_spgo_enabled: true # Enable SPGO steps: - task: PowerShell@2 displayName: Prepare Build Machine