5 Commits

Author	SHA1	Message	Date
Billy O'Neal	90a5b03c9f	Patch Tuesday for April 2024 (#38166) ... Changes this month: * Adopt [delegated-sas](https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas) tokens to allow us to shut off the storage account keys, thanks to @ryanerdmann for the help * Visual Studio 2022 17.8.9, hopefully resolves CVE-2024-26190, CVE-2024-21392 . (These don't matter to us but they cause the Microsoft-internal tool 'Service 360' to yell at us) * https://github.com/microsoft/vcpkg/pull/37902 * https://github.com/microsoft/vcpkg/pull/37903 --------- Co-authored-by: Kai Pastor <dg0yt@darc.de>	2024-04-25 18:25:03 -07:00
Billy O'Neal	9cbab417e4	Patch Tuesday March 2024 (#37466) ... This contains high priority active security things to adopt trusted launch, and managed identity rather than SAS tokens when minting the images, and 1ES Hosted Pools. Some instructions are rough around the edges because I'm not sure everything is repeatable yet while this is all in flux...	2024-03-18 13:26:24 -07:00
Billy O'Neal	ba1465e584	Patch Tuesday for February 2024 (#36757) ... * Cherry-pick infrastructure changes from https://github.com/microsoft/vcpkg/pull/36081 as authored by @dg0yt * Suppress warnings for the monthly docker mint as suggested by Toddy Mladenov ( MS internal conversation https://teams.microsoft.com/l/message/19:f498f444e97f40b2a2027d015a9047ab@thread.tacv2/1707520630587?tenantId=72f988bf-86f1-41af-91ab-2d7cd011db47&groupId=2080ccbe-0cfb-49e6-a9c1-ea6a6bf82722&parentMessageId=1707520630587&teamName=Containers%20Secure%20Supply%20Chain&channelName=3P%20Registry%20and%20Images%20Guidance&createdTime=1707520630587 ) * Move Azure Container Registry for Android to WestUS3; with this we are officially entirely within one Azure region again :D * Explicitly grant Azure DevOps permissions to touch the scale set rather than relying on subscription-level assignments.	2024-02-21 16:30:42 -08:00
Billy O'Neal	ba823b1e1f	Patch Tuesday 2023-10-11 (except macOS) (#34431)	2023-10-13 14:57:51 -07:00
Billy O'Neal	ad46340bfc	Use 1ES to provision Linux agents. (#32937)	2023-08-07 21:22:34 -07:00