Billy O'Neal
6cd9d7ff90
Patch Tuesday for July 2024 ( #39896 )
2024-07-15 23:18:52 -07:00
Billy O'Neal
90a5b03c9f
Patch Tuesday for April 2024 ( #38166 )
...
Changes this month:
* Adopt
[delegated-sas](https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas )
tokens to allow us to shut off the storage account keys, thanks to
@ryanerdmann for the help
* Visual Studio 2022 17.8.9, hopefully resolves CVE-2024-26190,
CVE-2024-21392 . (These don't matter to us but they cause the
Microsoft-internal tool 'Service 360' to yell at us)
* https://github.com/microsoft/vcpkg/pull/37902
* https://github.com/microsoft/vcpkg/pull/37903
---------
Co-authored-by: Kai Pastor <dg0yt@darc.de>
2024-04-25 18:25:03 -07:00
Billy O'Neal
9cbab417e4
Patch Tuesday March 2024 ( #37466 )
...
This contains high priority active security things to adopt trusted
launch, and managed identity rather than SAS tokens when minting the
images, and 1ES Hosted Pools.
Some instructions are rough around the edges because I'm not sure
everything is repeatable yet while this is all in flux...
2024-03-18 13:26:24 -07:00
Billy O'Neal
ba1465e584
Patch Tuesday for February 2024 ( #36757 )
...
* Cherry-pick infrastructure changes from
https://github.com/microsoft/vcpkg/pull/36081 as authored by @dg0yt
* Suppress warnings for the monthly docker mint as suggested by Toddy
Mladenov ( MS internal conversation
https://teams.microsoft.com/l/message/19:f498f444e97f40b2a2027d015a9047ab@thread.tacv2/1707520630587?tenantId=72f988bf-86f1-41af-91ab-2d7cd011db47&groupId=2080ccbe-0cfb-49e6-a9c1-ea6a6bf82722&parentMessageId=1707520630587&teamName=Containers%20Secure%20Supply%20Chain&channelName=3P%20Registry%20and%20Images%20Guidance&createdTime=1707520630587
)
* Move Azure Container Registry for Android to WestUS3; with this we are
officially entirely within one Azure region again :D
* Explicitly grant Azure DevOps permissions to touch the scale set
rather than relying on subscription-level assignments.
2024-02-21 16:30:42 -08:00
Billy O'Neal
ba823b1e1f
Patch Tuesday 2023-10-11 (except macOS) ( #34431 )
2023-10-13 14:57:51 -07:00
Billy O'Neal
ad46340bfc
Use 1ES to provision Linux agents. ( #32937 )
2023-08-07 21:22:34 -07:00
