Add SBOM task to build pipelines (#267)

* add SBOM task to build pipelines * fix path * add generation task to release pipeline * update task name Co-authored-by: Ryan Fu <Fu.Ryan@microsoft.com>
microsoft · May 3, 2022 · d063463 · d063463
1 parent 8928d8c
commit d063463
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/pipelines/azure-pipelines.release.yml b/pipelines/azure-pipelines.release.yml
@@ -181,6 +181,11 @@ jobs:
             $(appxBundlePath)
             $(appxBundlePath).txt
 
+      - task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0
+        displayName: 'Generate SBOM'
+        inputs:
+            BuildDropPath: '$(Build.ArtifactStagingDirectory)'
+
       - publish: $(Build.ArtifactStagingDirectory)
         artifact: wingetcreate
         displayName: Publish appx, exe, and hash files

diff --git a/pipelines/azure-pipelines.yml b/pipelines/azure-pipelines.yml
@@ -96,6 +96,11 @@ jobs:
             /p:UapAppxPackageBuildMode=SideloadOnly
             /p:AppxPackageSigningEnabled=false'
 
+      - task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0
+        displayName: 'Generate SBOM'
+        inputs:
+            BuildDropPath: '$(appxPackageDir)'
+
       - publish: $(appxBundlePath)
         artifact: msixbundle
         displayName: Publish msix bundle