From 6ffc1cae4c912b106a677104417deff66d1f0349 Mon Sep 17 00:00:00 2001 From: Victoria Hall Date: Fri, 31 Jul 2026 07:12:19 -0500 Subject: [PATCH 1/4] build: update to cfs pt.2 --- eng/templates/jobs/build.yml | 6 +-- .../official/jobs/build-artifacts.yml | 6 +-- .../official/jobs/publish-release.yml | 8 ++-- eng/templates/official/jobs/unit-tests.yml | 42 +++++++++---------- 4 files changed, 31 insertions(+), 31 deletions(-) diff --git a/eng/templates/jobs/build.yml b/eng/templates/jobs/build.yml index 0b1c144..9c68970 100644 --- a/eng/templates/jobs/build.yml +++ b/eng/templates/jobs/build.yml @@ -27,13 +27,13 @@ jobs: EXTENSION_NAME: 'Connectors' steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: '3.11' - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: public/PythonExtensions_PublicPackages + - task: UsePythonVersion@0 + inputs: + versionSpec: '3.11' - bash: | python --version displayName: 'Check python version' diff --git a/eng/templates/official/jobs/build-artifacts.yml b/eng/templates/official/jobs/build-artifacts.yml index 4146511..07df8d1 100644 --- a/eng/templates/official/jobs/build-artifacts.yml +++ b/eng/templates/official/jobs/build-artifacts.yml @@ -33,13 +33,13 @@ jobs: artifactName: "$(EXTENSION_DIRECTORY)" steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: '3.11' - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: internal/PythonExtensions_Internal_PublicPackages + - task: UsePythonVersion@0 + inputs: + versionSpec: '3.11' - bash: | python --version displayName: 'Check python version' diff --git a/eng/templates/official/jobs/publish-release.yml b/eng/templates/official/jobs/publish-release.yml index d166ffd..c9cc7b6 100644 --- a/eng/templates/official/jobs/publish-release.yml +++ b/eng/templates/official/jobs/publish-release.yml @@ -200,6 +200,10 @@ jobs: dependsOn: ['FinishWorkerPr'] displayName: 'PyPI Package' steps: + - task: PipAuthenticate@1 + displayName: 'Pip Authenticate' + inputs: + artifactFeeds: internal/PythonExtensions_Internal_PublicPackages - task: DownloadPipelineArtifact@2 displayName: 'Download Python Extension release/.x.y.z Artifact' inputs: @@ -214,10 +218,6 @@ jobs: displayName: 'Use Python 3.11' inputs: versionSpec: 3.11 - - task: PipAuthenticate@1 - displayName: 'Pip Authenticate' - inputs: - artifactFeeds: internal/PythonExtensions_Internal_PublicPackages - pwsh: | $newLibraryVersion = "$(NewLibraryVersion)" $pypiToken = "$(PypiToken)" diff --git a/eng/templates/official/jobs/unit-tests.yml b/eng/templates/official/jobs/unit-tests.yml index bf44241..a77fcb9 100644 --- a/eng/templates/official/jobs/unit-tests.yml +++ b/eng/templates/official/jobs/unit-tests.yml @@ -28,13 +28,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-base @@ -51,13 +51,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-bindings-blob @@ -82,13 +82,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-bindings-cosmosdb @@ -108,13 +108,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-bindings-eventhub @@ -131,13 +131,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-http-fastapi @@ -154,13 +154,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-bindings-servicebus @@ -177,13 +177,13 @@ jobs: matrix: ${{ parameters.python_versions }} condition: always() steps: - - task: UsePythonVersion@0 - inputs: - versionSpec: $(PYTHON_VERSION) - task: PipAuthenticate@1 displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + - task: UsePythonVersion@0 + inputs: + versionSpec: $(PYTHON_VERSION) - bash: | python -m pip install --upgrade pip cd azurefunctions-extensions-connectors From f0cf6c93065c8e6f068f05506fc2cc76f4af1173 Mon Sep 17 00:00:00 2001 From: Victoria Hall Date: Fri, 31 Jul 2026 07:29:03 -0500 Subject: [PATCH 2/4] update pip audit --- eng/templates/jobs/build.yml | 2 +- eng/templates/official/jobs/build-artifacts.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/eng/templates/jobs/build.yml b/eng/templates/jobs/build.yml index 9c68970..2f2921c 100644 --- a/eng/templates/jobs/build.yml +++ b/eng/templates/jobs/build.yml @@ -46,5 +46,5 @@ jobs: - bash: | pip install pip-audit cd $(EXTENSION_DIRECTORY) - pip-audit . + pip-audit --vulnerability-service osv . displayName: 'Run vulnerability scan' diff --git a/eng/templates/official/jobs/build-artifacts.yml b/eng/templates/official/jobs/build-artifacts.yml index 07df8d1..3e56fa7 100644 --- a/eng/templates/official/jobs/build-artifacts.yml +++ b/eng/templates/official/jobs/build-artifacts.yml @@ -52,5 +52,5 @@ jobs: - bash: | pip install pip-audit cd $(EXTENSION_DIRECTORY) - pip-audit . + pip-audit --vulnerability-service osv . displayName: 'Run vulnerability scan' From 63405ee753413506ba9cec23480cdc85e5f14c3b Mon Sep 17 00:00:00 2001 From: Victoria Hall Date: Fri, 31 Jul 2026 07:41:10 -0500 Subject: [PATCH 3/4] extra pip auth flag --- eng/templates/jobs/build.yml | 1 + eng/templates/official/jobs/build-artifacts.yml | 1 + eng/templates/official/jobs/publish-release.yml | 1 + eng/templates/official/jobs/unit-tests.yml | 7 +++++++ 4 files changed, 10 insertions(+) diff --git a/eng/templates/jobs/build.yml b/eng/templates/jobs/build.yml index 2f2921c..bb091ef 100644 --- a/eng/templates/jobs/build.yml +++ b/eng/templates/jobs/build.yml @@ -31,6 +31,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: public/PythonExtensions_PublicPackages + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: '3.11' diff --git a/eng/templates/official/jobs/build-artifacts.yml b/eng/templates/official/jobs/build-artifacts.yml index 3e56fa7..60964a1 100644 --- a/eng/templates/official/jobs/build-artifacts.yml +++ b/eng/templates/official/jobs/build-artifacts.yml @@ -37,6 +37,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: internal/PythonExtensions_Internal_PublicPackages + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: '3.11' diff --git a/eng/templates/official/jobs/publish-release.yml b/eng/templates/official/jobs/publish-release.yml index c9cc7b6..de1d4ce 100644 --- a/eng/templates/official/jobs/publish-release.yml +++ b/eng/templates/official/jobs/publish-release.yml @@ -204,6 +204,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: internal/PythonExtensions_Internal_PublicPackages + onlyAddExtraIndex: false - task: DownloadPipelineArtifact@2 displayName: 'Download Python Extension release/.x.y.z Artifact' inputs: diff --git a/eng/templates/official/jobs/unit-tests.yml b/eng/templates/official/jobs/unit-tests.yml index a77fcb9..e208ef5 100644 --- a/eng/templates/official/jobs/unit-tests.yml +++ b/eng/templates/official/jobs/unit-tests.yml @@ -32,6 +32,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) @@ -55,6 +56,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) @@ -86,6 +88,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) @@ -112,6 +115,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) @@ -135,6 +139,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) @@ -158,6 +163,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) @@ -181,6 +187,7 @@ jobs: displayName: 'Pip Authenticate' inputs: artifactFeeds: ${{ parameters.ArtifactFeed }} + onlyAddExtraIndex: false - task: UsePythonVersion@0 inputs: versionSpec: $(PYTHON_VERSION) From 794a72ec1c1d0c2cc3625ff4588c67b87523d621 Mon Sep 17 00:00:00 2001 From: Victoria Hall Date: Fri, 31 Jul 2026 08:01:36 -0500 Subject: [PATCH 4/4] remove pip audit (temp) --- eng/templates/jobs/build.yml | 5 ----- eng/templates/official/jobs/build-artifacts.yml | 5 ----- 2 files changed, 10 deletions(-) diff --git a/eng/templates/jobs/build.yml b/eng/templates/jobs/build.yml index bb091ef..0988579 100644 --- a/eng/templates/jobs/build.yml +++ b/eng/templates/jobs/build.yml @@ -44,8 +44,3 @@ jobs: cd $(EXTENSION_DIRECTORY) python -m build displayName: 'Build $(EXTENSION_NAME) Extension' - - bash: | - pip install pip-audit - cd $(EXTENSION_DIRECTORY) - pip-audit --vulnerability-service osv . - displayName: 'Run vulnerability scan' diff --git a/eng/templates/official/jobs/build-artifacts.yml b/eng/templates/official/jobs/build-artifacts.yml index 60964a1..ad33558 100644 --- a/eng/templates/official/jobs/build-artifacts.yml +++ b/eng/templates/official/jobs/build-artifacts.yml @@ -50,8 +50,3 @@ jobs: cd $(EXTENSION_DIRECTORY) python -m build displayName: 'Build $(EXTENSION_NAME) Extension' - - bash: | - pip install pip-audit - cd $(EXTENSION_DIRECTORY) - pip-audit --vulnerability-service osv . - displayName: 'Run vulnerability scan'