From 67025f1fa18ff387de7ef3e52bf12d1cbaf8671e Mon Sep 17 00:00:00 2001
From: Travis Plunk <travis.plunk@microsoft.com>
Date: Wed, 12 Jul 2023 14:13:22 -0700
Subject: [PATCH] Change variable used to bypass nuget security scanning
 (#19953)

---
 tools/releaseBuild/azureDevOps/compliance.yml |  2 ++
 .../releaseBuild/azureDevOps/releaseBuild.yml |  2 ++
 .../templates/insert-nuget-config-azfeed.yml  | 21 +++++++++++++------
 3 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/tools/releaseBuild/azureDevOps/compliance.yml b/tools/releaseBuild/azureDevOps/compliance.yml
index 43ef005402..57c29194de 100644
--- a/tools/releaseBuild/azureDevOps/compliance.yml
+++ b/tools/releaseBuild/azureDevOps/compliance.yml
@@ -24,6 +24,8 @@ variables:
     value: 1
   - name: POWERSHELL_TELEMETRY_OPTOUT
     value: 1
+  - name: nugetMultiFeedWarnLevel
+    value: none
   - name: NugetSecurityAnalysisWarningLevel
     value: none
   # Defines the variables AzureFileCopySubscription, StorageAccount, StorageAccountKey, StorageResourceGroup, StorageSubscriptionName
diff --git a/tools/releaseBuild/azureDevOps/releaseBuild.yml b/tools/releaseBuild/azureDevOps/releaseBuild.yml
index 02b0f1cd4a..c71616137c 100644
--- a/tools/releaseBuild/azureDevOps/releaseBuild.yml
+++ b/tools/releaseBuild/azureDevOps/releaseBuild.yml
@@ -32,6 +32,8 @@ variables:
     value: 1
   - name: POWERSHELL_TELEMETRY_OPTOUT
     value: 1
+  - name: nugetMultiFeedWarnLevel
+    value: none
   - name: NugetSecurityAnalysisWarningLevel
     value: none
   # Prevents auto-injection of nuget-security-analysis@0
diff --git a/tools/releaseBuild/azureDevOps/templates/insert-nuget-config-azfeed.yml b/tools/releaseBuild/azureDevOps/templates/insert-nuget-config-azfeed.yml
index 3ba642407c..3ff723be6e 100644
--- a/tools/releaseBuild/azureDevOps/templates/insert-nuget-config-azfeed.yml
+++ b/tools/releaseBuild/azureDevOps/templates/insert-nuget-config-azfeed.yml
@@ -4,25 +4,34 @@ parameters:
 
 steps:
 - pwsh: |
+      $configPath = "${env:NugetConfigDir}/nuget.config"
       Import-Module ${{ parameters.repoRoot }}/build.psm1 -Force
-      New-NugetConfigFile -NugetFeedUrl $(AzDevOpsFeed) -UserName $(AzDevOpsFeedUserName) -ClearTextPAT $(AzDevOpsFeedPAT2) -FeedName AzDevOpsFeed -Destination '${{ parameters.repoRoot }}/src/Modules'
+      New-NugetConfigFile -NugetFeedUrl $(AzDevOpsFeed) -UserName $(AzDevOpsFeedUserName) -ClearTextPAT $(AzDevOpsFeedPAT2) -FeedName AzDevOpsFeed -Destination "${env:NugetConfigDir}"
 
-      if(-not (Test-Path "${{ parameters.repoRoot }}/src/Modules/nuget.config"))
+      if(-not (Test-Path $configPath))
       {
           throw "nuget.config is not created"
       }
+      Get-Content $configPath | Write-Verbose -Verbose
   displayName: 'Add nuget.config for Azure DevOps feed for PSGallery modules'
   condition: and(succeededOrFailed(), ne(variables['AzDevOpsFeed'], ''))
-- pwsh: |
-      Import-Module ${{ parameters.repoRoot }}/build.psm1 -Force
-      New-NugetConfigFile -NugetFeedUrl $(PSInternalNugetFeed) -UserName $(PSInternalNugetFeedUserName) -ClearTextPAT $(PSInternalNugetFeedPAT) -FeedName AzDevOpsFeed -Destination '${{ parameters.repoRoot }}'
+  env:
+    NugetConfigDir: ${{ parameters.repoRoot }}/src/Modules
 
-      if(-not (Test-Path "${{ parameters.repoRoot }}/nuget.config"))
+- pwsh: |
+      $configPath = "${env:NugetConfigDir}/nuget.config"
+      Import-Module ${{ parameters.repoRoot }}/build.psm1 -Force
+      New-NugetConfigFile -NugetFeedUrl $(PSInternalNugetFeed) -UserName $(PSInternalNugetFeedUserName) -ClearTextPAT $(PSInternalNugetFeedPAT) -FeedName AzDevOpsFeed -Destination "${env:NugetConfigDir}"
+
+      if(-not (Test-Path $configPath))
       {
           throw "nuget.config is not created"
       }
+      Get-Content $configPath | Write-Verbose -Verbose
   displayName: 'Add nuget.config for Azure DevOps feed for packages'
   condition: and(succeededOrFailed(), ne(variables['PSInternalNugetFeed'], ''))
+  env:
+    NugetConfigDir: ${{ parameters.repoRoot }}
 
 - task: nuget-security-analysis@0
   displayName: 'Run Secure Supply Chain analysis'