Files.yml

# Specifies the files synced from Mu DevOps to other Project Mu repositories.
#
# This file is meant to ensure common configuration across Project Mu repos that is centralized in Mu DevOps.
#
# Files are contributed directly in Mu DevOps by the original author and then automatically synced after the PR
# in Mu DevOps is merged by UEFI Bot to all of the repos specified in this file.
#
# To maintain consistency across Project Mu, always consider if a configuration/settings file is appropriate as
# a common file in Mu DevOps or should be repo-specific.
#
# Copyright (c) Microsoft Corporation.
# SPDX-License-Identifier: BSD-2-Clause-Patent
#
# For more information, see:
# https://github.com/BetaHuhn/repo-file-sync-action

# Maintenance: Keep labels groups in ascending alphabetical order - easier to scan, identify duplicates, etc.

# Azure Pipelines - Common Configs
#
# These files leverage a high degree of common build template reuse from Mu DevOps. It is preferred that repos
# use the common templates for pipelines and adjust template parameter inputs as needed for a specific repo. However,
# a repo can always be removed from this list and manage its pipeline YAML files completely independently if absolutely
# necessary.
#
# Note: The fact that these files are copied to a repo does not mean that the repo has pipelines
#       set up to use the YAML file. The file is simply available for pipelines to be connected
#       if needed.
group:
# Azure Pipelines - Matrix Dependent - GCC & VS Only
  - files:
    - source: .sync/azure_pipelines/MuDevOpsWrapper.yml
      dest: .azurepipelines/MuDevOpsWrapper.yml
      template: true
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_plus
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/mu_feature_config
      microsoft/mu_oem_sample
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv

# Azure Pipelines - Ignored Repos
#   - microsoft/mu
#     - Does not build firmware code
#   - microsoft/mu_crypto_release
#     - Has a custom release process
#   - microsoft/mu_devops
#     - Does not build firmware code
#   - microsoft/mu_feature_uefi_variable
#     - Not connected to pipelines yet

# CI Configuration - Markdown Lint - Common Settings
  - files:
    - source: .sync/ci_config/.markdownlint.yaml
      dest: .markdownlint.yaml
      template:
        allowed_elements:
          - br
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# CI Configuration - Markdown Lint - Mu Documentation Repo Settings
  - files:
    - source: .sync/ci_config/.markdownlint.yaml
      dest: .markdownlint.yaml
      template:
        allowed_elements:
          - br
          - center
          - img
    repos: |
      microsoft/mu

# CI Configuration - Markdown Lint - Mu MM Supervisor Repo Settings
  - files:
    - source: .sync/ci_config/.markdownlint.yaml
      dest: .markdownlint.yaml
      template:
        allowed_elements:
          - br
          - SmmCategory
          - PolicyAccessAttribute
    repos: |
      microsoft/mu_feature_mm_supv

# dependabot - Track GitHub Actions and PIP Modules
  - files:
    - source: .sync/dependabot/actions-pip.yml
      dest: .github/dependabot.yml
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# dependabot - Track GitHub Actions, PIP Modules, and Git Submodules
  - files:
    - source: .sync/dependabot/actions-pip-submodules.yml
      dest: .github/dependabot.yml
    repos: |
      microsoft/mu_tiano_platforms

# Development Container - Common for CI based repos
  - files:
    - source: .sync/devcontainer/devcontainer.json
      dest: .devcontainer/devcontainer.json
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_plus
      microsoft/mu_feature_mm_supv

# GitHub Templates - Contributing
  - files:
    - source: .sync/github_templates/contributing/CONTRIBUTING.md
      dest: CONTRIBUTING.md
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# GitHub Templates - Issues
#
# Note: This "ISSUE_TEMPLATE" directory is synced as-is
  - files:
    - source: .sync/github_templates/ISSUE_TEMPLATE/
      dest: .github/ISSUE_TEMPLATE/
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# GitHub Templates - Licensing - Project Mu License
  - files:
    - source: .sync/github_templates/licensing/project_mu_license.txt
      dest: LICENSE.txt
    repos: |
      microsoft/mu
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_dfci
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus

# GitHub Templates - Licensing - Project Mu License - Bot Requires LICENSE file
  - files:
    - source: .sync/github_templates/licensing/project_mu_license.txt
      dest: LICENSE
    repos: |
      microsoft/mu_rust_hid

# GitHub Templates - Licensing - Project Mu and TianoCore License
  - files:
    - source: .sync/github_templates/licensing/project_mu_and_tianocore_license.txt
      dest: License.txt
    repos: |
      microsoft/mu_feature_ipmi
      microsoft/mu_tiano_platforms

# GitHub Templates - Licensing - TianoCore License
  - files:
    - source: .sync/github_templates/licensing/tianocore_license.txt
      dest: License.txt
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_plus

# GitHub Templates - Security Policy
  - files:
    - source: .sync/github_templates/security/SECURITY.md
      dest: SECURITY.md
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# Leaf Workflow - Apply Labels
  - files:
    - source: .sync/workflows/leaf/label-issues.yml
      dest: .github/workflows/label-issues.yml
      template: true
    - source: .sync/workflows/config/label-issues/file-paths.yml
      dest: .github/workflows/label-issues/file-paths.yml
    - source: .sync/workflows/config/label-issues/regex-pull-requests.yml
      dest: .github/workflows/label-issues/regex-pull-requests.yml
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# Leaf Workflow - Auto Merger
  - files:
    - source: .sync/workflows/leaf/auto-merge.yml
      dest: .github/workflows/auto-merge.yml
      template: true
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# Leaf Workflow - Auto Approver
  - files:
    - source: .sync/workflows/leaf/auto-approve.yml
      dest: .github/workflows/auto-approve.yml
      template: true
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# Leaf Workflow - CodeQL
# Note: This workflow should be used in repos that build firmware
#       packages from a CI builder (i.e. a CISettings.py file).
# Note: Lack of Visual Studio support is currently a blocker for
#       enabling the CodeQL workflow as-is in mu_silicon_arm_tiano.
#       # microsoft/mu_silicon_arm_tiano
  - files:
    - source: .sync/workflows/leaf/codeql.yml
      dest: .github/workflows/codeql.yml
      template: true
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_plus

# Leaf Workflow - CodeQL - Platform
# Note: This workflow should be used in repos that build firmware
#       packages from a platform builder (i.e. a PlatformBuild.py file).
# Note: Lack of Visual Studio support is currently a blocker for
#       enabling the CodeQL workflow as-is in mu_silicon_arm_tiano.
#       # microsoft/mu_silicon_arm_tiano
  - files:
    - source: .sync/workflows/leaf/codeql-platform.yml
      dest: .github/workflows/codeql-platform.yml
      template: true
    repos: |
      microsoft/mu_tiano_platforms

# Leaf Workflow - Issue Triage
# Leaf Workflow - Issue Assignment
#                 Note: This workflow is synced with "Issue Triage" because it adjusts
#                 labels typically applied in the triage process and applies to the
#                 same set of repositories that support issue labeing.
  - files:
    - source: .sync/workflows/leaf/triage-issues.yml
      dest: .github/workflows/triage-issues.yml
      template: true
    # Note: This file name (`advanced-issue-labeler.yml`) and path (`/.github/`) is
    #       not configurable right now. Otherwise, this would get placed in a file
    #       at `.github/workflows/triage-issues/issue-label-mapping.yml`.
    - source: .sync/workflows/config/triage-issues/advanced-issue-labeler.yml
      dest: .github/advanced-issue-labeler.yml
    - source: .sync/workflows/leaf/issue-assignment.yml
      dest: .github/workflows/issue-assignment.yml
      template: true
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# Leaf Workflow - Label Sync
  - files:
    - source: .sync/workflows/leaf/label-sync.yml
      dest: .github/workflows/label-sync.yml
      template: true
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# Leaf Workflow - Mark Stale Issues and Pull Requests
  - files:
    - source: .sync/workflows/leaf/stale.yml
      dest: .github/workflows/stale.yml
      template: true
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# Leaf Workflow - Mark Stale Issues and Pull Requests (Mu DevOps Adjustment)
# Prevents the reusable workflow file from being overwritten by the leaf workflow
# file in Mu DevOps.
  - files:
    - source: .sync/workflows/leaf/stale.yml
      dest: .github/workflows/stale-leaf.yml
      template: true
    repos: |
      microsoft/mu_devops

# Leaf Workflow - Pull Request Validator
  - files:
    - source: .sync/workflows/leaf/pull-request-formatting-validator.yml
      dest: .github/workflows/pull-request-formatting-validator.yml
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# Leaf Workflow - Release Draft
# Note: The branch name used to draft releases on in this group is
#       set to the value "main"
  - files:
    - source: .sync/workflows/leaf/release-draft.yml
      dest: .github/workflows/release-draft.yml
      template:
        trigger_branch_name: 'main'
    - source: .sync/workflows/config/release-draft/release-draft-config.yml
      dest: .github/release-draft-config.yml
      template: true
    repos: |
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_rust_hid
      microsoft/mu_tiano_platforms
      microsoft/secureboot_objects

# Leaf Workflow - Release Draft
# Note: This group has two files synced that allow separate configuration for
#       n (e.g. "release/202311") and n-1 (e.g. "release/202302") branches.
  - files:
    - source: .sync/workflows/leaf/release-draft.yml
      dest: .github/workflows/release-draft.yml
      template: true
    - source: .sync/workflows/config/release-draft/release-draft-config.yml
      dest: .github/release-draft-config-n.yml
      template:
        latest: true
        release_branch: true
    - source: .sync/workflows/config/release-draft/release-draft-config.yml
      dest: .github/release-draft-config-n-1.yml
      template:
        latest: false
        release_branch: true
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_plus

# Leaf Workflow - Scheduled Maintenance
# Note: This currently sync to the same repos as the label sync since it is exclusively
#       performing cleanup based on labels.
  - files:
    - source: .sync/workflows/leaf/scheduled-maintenance.yml
      dest: .github/workflows/scheduled-maintenance.yml
    repos: |
      microsoft/mu
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_devops
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus
      microsoft/secureboot_objects

# Leaf Workflow - Submodule Release Update
  - files:
    - source: .sync/workflows/leaf/submodule-release-update.yml
      dest: .github/workflows/submodule-release-update.yml
      template: true
    repos: |
      microsoft/mu_tiano_platforms

# Pull Request Template - Common Template
  - files:
    - source: .sync/github_templates/pull_requests/pull_request_template.md
      dest: .github/pull_request_template.md
    repos: |
      microsoft/mu_basecore
      microsoft/mu_common_intel_min_platform
      microsoft/mu_crypto_release
      microsoft/mu_feature_config
      microsoft/mu_feature_debugger
      microsoft/mu_feature_dfci
      microsoft/mu_feature_ipmi
      microsoft/mu_feature_mm_supv
      microsoft/mu_feature_uefi_variable
      microsoft/mu_oem_sample
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_silicon_arm_tiano
      microsoft/mu_silicon_intel_tiano
      microsoft/mu_tiano_platforms
      microsoft/mu_tiano_plus

# Rust - Pipeline Files
  - files:
    - source: .sync/azure_pipelines/RustSetupSteps.yml
      dest: Steps/RustSetupSteps.yml
      template: true
    repos: |
      microsoft/mu_devops

# Rust - Formatting configuration
  - files:
    - source: .sync/rust_config/rust-toolchain.toml
      dest: rust-toolchain.toml
      template: true
    - source: .sync/rust_config/rustfmt.toml
      dest: rustfmt.toml
    repos: |
      microsoft/mu_basecore
      microsoft/mu_plus
      microsoft/mu_rust_hid
      microsoft/mu_tiano_platforms

# Rust - Makefile (for UEFI builds)
  - files:
    - source: .sync/rust_config/Makefile.toml
      dest: Makefile.toml
    repos: |
      microsoft/mu_basecore
      microsoft/mu_plus
      microsoft/mu_tiano_platforms