From c5fa3d241e5a2a1ae96a2abed0a4c083e1b047fe Mon Sep 17 00:00:00 2001 From: Vineeth Thomas Alex Date: Tue, 3 Feb 2026 16:51:07 -0600 Subject: [PATCH 1/3] Remove PreFast settings from OneBranch pipeline Removed PreFast parameters from build configuration. --- .pipelines/OneBranch.Official.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.pipelines/OneBranch.Official.yml b/.pipelines/OneBranch.Official.yml index 56fada62..996f2a60 100644 --- a/.pipelines/OneBranch.Official.yml +++ b/.pipelines/OneBranch.Official.yml @@ -57,8 +57,6 @@ extends: BuildConfiguration: $(BuildConfiguration) BuildVersion: $(BuildVersion) OfficialBuild: true - ob_sdl_prefast_enabled: true - ob_sdl_prefast_runDuring: "Guardian" # Enabling PreFast only for build stage - stage: vpack dependsOn: build @@ -68,7 +66,6 @@ extends: type: windows variables: ob_outputDirectory: '$(Build.SourcesDirectory)\out' - ob_createvpack_enabled: true ob_createvpack_packagename: CppWinRT.Compiler ob_createvpack_owneralias: cpp4uwpt From 9e1496b3fb091c29fba9c1fe0467955a69dd2f5a Mon Sep 17 00:00:00 2001 From: Vineeth Thomas Alex Date: Tue, 3 Feb 2026 16:52:07 -0600 Subject: [PATCH 2/3] Update PreFast run stage in OneBranchBuild.yml Changed PreFast run stage from 'Build' to 'Guardian' to enable it only during the Guardian stage. --- .pipelines/jobs/OneBranchBuild.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pipelines/jobs/OneBranchBuild.yml b/.pipelines/jobs/OneBranchBuild.yml index b5c060cb..f4ae37c5 100644 --- a/.pipelines/jobs/OneBranchBuild.yml +++ b/.pipelines/jobs/OneBranchBuild.yml @@ -32,7 +32,7 @@ jobs: ob_sdl_codeSignValidation_excludes: '-|**\*.exe;-|**\*.dll' ob_sdl_prefast_enabled: true - ob_sdl_prefast_runDuring: 'Build' + ob_sdl_prefast_runDuring: "Guardian" # Enabling PreFast only for build stage ob_sdl_checkCompliantCompilerWarnings: true ob_symbolsPublishing_enabled: ${{ parameters.OfficialBuild }} From ac4413d818d6b30abf2b400bc35c902adab597a8 Mon Sep 17 00:00:00 2001 From: Vineeth Thomas Alex Date: Tue, 3 Feb 2026 16:54:47 -0600 Subject: [PATCH 3/3] Correct indentation for PreFast configuration Fix indentation for ob_sdl_prefast_runDuring in OneBranchBuild.yml --- .pipelines/jobs/OneBranchBuild.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pipelines/jobs/OneBranchBuild.yml b/.pipelines/jobs/OneBranchBuild.yml index f4ae37c5..dfee85ed 100644 --- a/.pipelines/jobs/OneBranchBuild.yml +++ b/.pipelines/jobs/OneBranchBuild.yml @@ -32,7 +32,7 @@ jobs: ob_sdl_codeSignValidation_excludes: '-|**\*.exe;-|**\*.dll' ob_sdl_prefast_enabled: true - ob_sdl_prefast_runDuring: "Guardian" # Enabling PreFast only for build stage + ob_sdl_prefast_runDuring: "Guardian" ob_sdl_checkCompliantCompilerWarnings: true ob_symbolsPublishing_enabled: ${{ parameters.OfficialBuild }}