[DRAFT - CI validation only] Fix WixToolset.Sdk resolution under CFSClean feed pinning

build/build-and-unit-tests.yml

@@ -1,4 +1,4 @@
-# Copyright (c) Microsoft. All rights reserved.
+# Copyright (c) Microsoft. All rights reserved.
 # Licensed under the MIT license. See LICENSE file in the project root for full license information.
 # This template contains jobs to build and run unit tests
 
@@ -12,6 +12,8 @@ jobs:
   displayName: Build and run unit tests - ${{ parameters.configuration }}
   condition: succeeded()
   templateContext:
+    settings:
+      networkIsolationPolicy: Permissive,CFSClean
     outputs:
       - output: buildArtifacts
         artifactName: drop
@@ -40,8 +42,13 @@ jobs:
     inputs:
       script: set
 
+  - template: prepare-nuget.yml
+
   - task: NuGetCommand@2
     displayName: 'NuGet restore'
+    inputs:
+      feedsToUse: config
+      nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
   - task: DotNetCoreCLI@2
     displayName: 'dotnet restore'
@@ -50,6 +57,8 @@ jobs:
       projects: |
         **\*.csproj
         !**\CustomActions.Package.csproj
+      feedsToUse: config
+      nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
   - task: VSBuild@1
     displayName: 'Build Solution **\*.sln'

build/check-dependencies.yml

@@ -1,4 +1,4 @@
-# Copyright (c) Microsoft. All rights reserved.
+# Copyright (c) Microsoft. All rights reserved.
 # Licensed under the MIT license. See LICENSE file in the project root for full license information.
 # This template checks for assemblies that may need harvesting in ClearlyDefined
 
@@ -13,14 +13,22 @@ jobs:
     name: $(a11yInsightsPool) # Name of your hosted pool
     image: windows-2022-secure # Name of the image in your pool. If not specified, first image of the pool is used
     os: windows # OS of the image. Allowed values: windows, linux, macOS
+  templateContext:
+    settings:
+      networkIsolationPolicy: Permissive,CFSClean
   steps:
   - task: NuGetToolInstaller@1
     displayName: 'Use NuGet 5.x'
     inputs:
       versionSpec: '5.x'
 
+  - template: prepare-nuget.yml
+
   - task: NuGetCommand@2
     displayName: 'NuGet restore'
+    inputs:
+      feedsToUse: config
+      nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
   - task: PowerShell@2
     displayName: 'Check ClearlyDefined'

build/prbuild.yml

@@ -24,6 +24,7 @@ extends:
   parameters:
     settings:
       skipBuildTagsForGitHubPullRequests: true
+      networkIsolationPolicy: Permissive,CFSClean
     # Update the pool with your team's 1ES hosted pool.
     pool:
       name: $(a11yInsightsPool) # Name of your hosted pool

build/prepare-nuget.yml

@@ -0,0 +1,13 @@
+# Copyright (c) Microsoft. All rights reserved.
+# Licensed under the MIT license. See LICENSE file in the project root for full license information.
+# Prepares NuGet for a solution restore by authenticating to the Azure Artifacts
+# feed declared in nuget.config.
+
+parameters:
+- name: nugetConfigPath
+  type: string
+  default: '$(Build.SourcesDirectory)/src/nuget.config'
+
+steps:
+- task: NuGetAuthenticate@1
+  displayName: 'Authenticate to NuGet feeds'

build/signedbuild.yml

@@ -1,4 +1,4 @@
-# Copyright (c) Microsoft. All rights reserved.
+# Copyright (c) Microsoft. All rights reserved.
 # Licensed under the MIT license. See LICENSE file in the project root for full license information.
 name: $(date:yyyy-MM-dd)$(rev:.rr)
 trigger: none
@@ -66,8 +66,13 @@ extends:
           inputs:
             script: set
 
+        - template: prepare-nuget.yml
+
         - task: NuGetCommand@2
           displayName: 'NuGet restore'
+          inputs:
+            feedsToUse: config
+            nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
         - task: DotNetCoreCLI@2
           displayName: 'dotnet restore'
@@ -76,6 +81,8 @@ extends:
             projects: |
               **\*.csproj
               !**\CustomActions.Package.csproj
+            feedsToUse: config
+            nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
         - task: VSBuild@1
           displayName: 'Build Solution **\*.sln'
@@ -126,8 +133,15 @@ extends:
           inputs:
             script: set
 
+        - template: prepare-nuget.yml
+
         - task: NuGetCommand@2
           displayName: 'NuGet restore'
+          inputs:
+            command: 'restore'
+            restoreSolution: '$(Build.SourcesDirectory)\src\AccessibilityInsights.sln'
+            feedsToUse: config
+            nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
         - task: DotNetCoreCLI@2
           displayName: 'dotnet restore'
@@ -136,6 +150,8 @@ extends:
             projects: |
               **\*.csproj
               !**\CustomActions.Package.csproj
+            feedsToUse: config
+            nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
         - task: VSBuild@1
           displayName: 'Build Solution **\*.sln'
@@ -257,8 +273,13 @@ extends:
           inputs:
             script: set
 
+        - template: prepare-nuget.yml
+
         - task: NuGetCommand@2
           displayName: 'NuGet restore'
+          inputs:
+            feedsToUse: config
+            nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
         - task: DotNetCoreCLI@2
           displayName: 'dotnet restore'
@@ -267,6 +288,8 @@ extends:
             projects: |
               **\*.csproj
               !**\CustomActions.Package.csproj
+            feedsToUse: config
+            nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
         - task: ms.vss-governance-buildtask.governance-build-task-component-detection.ComponentGovernanceComponentDetection@0
           displayName: 'Component Detection'

build/ui-test-job.yml

@@ -1,4 +1,4 @@
-# Copyright (c) Microsoft. All rights reserved.
+# Copyright (c) Microsoft. All rights reserved.
 # Licensed under the MIT license. See LICENSE file in the project root for full license information.
 # This template contains jobs to run UI tests using WinAppDriver.
 
@@ -13,21 +13,32 @@ jobs:
     name: $(a11yInsightsPool) # Name of your hosted pool
     image: windows-2022-secure # Name of the image in your pool. If not specified, first image of the pool is used
     os: windows # OS of the image. Allowed values: windows, linux, macOS
+  templateContext:
+    settings:
+      networkIsolationPolicy: Permissive,CFSClean
   steps:
   - task: NuGetToolInstaller@1
     displayName: 'Use NuGet 5.x'
     inputs:
       versionSpec: '5.x'
 
+  - template: prepare-nuget.yml
+
   - task: NuGetCommand@2
     displayName: 'NuGet restore'
+    inputs:
+      command: restore
+      restoreSolution: '**/*.sln'
+      feedsToUse: config
+      nugetConfigPath: '$(Build.SourcesDirectory)/src/nuget.config'
 
   - task: VSBuild@1
     displayName: 'Build Solution **\*.sln'
     inputs:
       vsVersion: 17.0
       platform: '$(BuildPlatform)'
       configuration: ${{ parameters.configuration }}
+      msbuildArgs: '/restore /p:RestoreConfigFile=$(Build.SourcesDirectory)/src/nuget.config'
 
   - task: WinAppDriver.winappdriver-pipelines-task.winappdriver-pipelines-task.Windows Application Driver@0
     displayName: 'Start - WinAppDriver'

src/nuget.config

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+  <packageSources>
+    <clear />
+    <add key="a11y-insights-public" value="https://pkgs.dev.azure.com/accessibility-insights/_packaging/a11y-insights-public/nuget/v3/index.json" />
+  </packageSources>
+</configuration>