ci: enable GitHub autobaseline for nightly-main pipeline - #10297
Merged
ReubenBond merged 1 commit intoJul 22, 2026
Merged
Conversation
Add sdl.autobaseline.enableForGitHub to nightly-main.yaml so 1ES raises baseline PRs against GitHub, the source of truth, instead of leaving unclosable PRs on the ADO mirror. Mirrors the setting already present in build.yaml. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 6996cb91-77be-4553-84b9-fbec781d7e16
|
Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run. |
Copilot stopped reviewing on behalf of
ReubenBond due to an error
July 22, 2026 00:47
Contributor
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Enables SDL autobaselining for GitHub in the nightly main Azure Pipeline configuration.
Changes:
- Turned on SDL
autobaselinewithenableForGitHub: truefor the nightly main pipeline.
Show a summary per file
| File | Description |
|---|---|
| .azure/pipelines/nightly-main.yaml | Enables SDL autobaseline for GitHub in the pipeline template parameters |
Copilot's findings
- Files reviewed: 1/1 changed files
- Comments generated: 0
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
sdl.autobaseline.enableForGitHub: trueunderextends.parametersin.azure/pipelines/nightly-main.yaml.The main CI pipeline (
build.yaml) already has this setting. Without it here too, 1ES SDL baseline updates for the nightly pipeline get raised as unclosable PRs against the ADO mirror instead of against GitHub, the source of truth.Note: this setting only takes effect if the dnceng pipeline definition for
nightly-main.yamlis GitHub-backed (i.e. itsselfrepository is not the Azure Repos mirror). If it still points at the mirror, it will need to be repointed with help from 1ES PT.Microsoft Reviewers: Open in CodeFlow