Move from PkgES hosted agents to 1ES hosted agents (#16023)

tools/releaseBuild/azureDevOps/releaseBuild.yml

@@ -189,7 +189,9 @@ stages:
       - job: release_json
         displayName: Create and Upload release.json
         pool:
-          vmImage: 'windows-latest'
+          name: PowerShell1ES
+          demands:
+          - ImageOverride -equals MMS2019
         steps:
         - checkout: self
           clean: true

tools/releaseBuild/azureDevOps/templates/checkAzureContainer.yml

@@ -8,7 +8,9 @@ jobs:
   - group: Azure Blob variable group
   displayName: Delete blob is exists
   pool:
-    vmImage: windows-latest
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
   steps:
   - checkout: self
     clean: true

tools/releaseBuild/azureDevOps/templates/compliance.yml

@@ -8,11 +8,17 @@ jobs:
     value : false
   - name: NugetSecurityAnalysisWarningLevel
     value: none
+
+  # Defines the variables APIScanClient, APIScanTenant and APIScanSecret
+  - group: PS-PS-APIScan
+
   displayName: Compliance
   dependsOn:
     ${{ parameters.parentJobs }}
   pool:
-    name: Package ES Standard Build
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
 
   # APIScan can take a long time
   timeoutInMinutes: 180
@@ -115,6 +121,8 @@ jobs:
       softwareVersionNum: '$(ReleaseTagVar)'
       isLargeApp: false
       preserveTempFiles: true
+    env:
+      AzureServicesAuthConnectionString: RunAs=App;AppId=$(APIScanClient);TenantId=$(APIScanTenant);AppKey=$(APIScanSecret)
     continueOnError: true
 
   - task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2

tools/releaseBuild/azureDevOps/templates/json.yml

@@ -13,7 +13,9 @@ jobs:
     ${{ parameters.parentJobs }}
   condition: succeeded()
   pool:
-    vmImage: windows-latest
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
 
   steps:
   #- task: <task type name>@<version>

tools/releaseBuild/azureDevOps/templates/linux.yml

@@ -8,7 +8,9 @@ jobs:
   displayName: Build ${{ parameters.buildName }}
   condition: succeeded()
   pool:
-    vmImage: ubuntu-16.04
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMSUbuntu20.04
   dependsOn: ${{ parameters.parentJob }}
   variables:
     - name: runCodesignValidationInjection
@@ -66,7 +68,9 @@ jobs:
   dependsOn: build_${{ parameters.buildName }}
   condition: succeeded()
   pool:
-    vmImage: windows-latest
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
   variables:
     - name: buildName
       value: ${{ parameters.buildName }}

tools/releaseBuild/azureDevOps/templates/mac-file-signing.yml

@@ -7,7 +7,9 @@ jobs:
     dependsOn: build_macOS_${{ parameters.buildArchitecture }}
     condition: succeeded()
     pool:
-      name: Package ES Standard Build
+      name: PowerShell1ES
+      demands:
+      - ImageOverride -equals MMS2019
     variables:
       - group: ESRP
       - name: runCodesignValidationInjection

tools/releaseBuild/azureDevOps/templates/mac-package-signing.yml

@@ -7,7 +7,9 @@ jobs:
   dependsOn: package_macOS_${{ parameters.buildArchitecture }}
   condition: succeeded()
   pool:
-    name: Package ES Standard Build
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
   variables:
     - group: ESRP
     - name: runCodesignValidationInjection

tools/releaseBuild/azureDevOps/templates/nuget.yml

@@ -7,7 +7,10 @@ jobs:
     ${{ parameters.parentJobs }}
   displayName: Build NuGet packages
   condition: succeeded()
-  pool: Package ES Standard Build
+  pool:
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
 
   timeoutInMinutes: 90
 

tools/releaseBuild/azureDevOps/templates/windows-component-governance.yml

@@ -10,7 +10,9 @@ jobs:
   condition: succeeded()
 
   pool:
-    name: Package ES Standard Build
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
 
   steps:
   - checkout: self

tools/releaseBuild/azureDevOps/templates/windows-hosted-build.yml

@@ -14,7 +14,9 @@ jobs:
   condition: succeeded()
   dependsOn: ${{ parameters.parentJob }}
   pool:
-    vmImage: windows-latest
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
   variables:
     - name: runCodesignValidationInjection
       value: false

tools/releaseBuild/azureDevOps/templates/windows-package-signing.yml

@@ -8,7 +8,9 @@ jobs:
     ${{ parameters.parentJobs }}
   condition: succeeded()
   pool:
-    vmImage: windows-latest
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
   variables:
     - name: DOTNET_SKIP_FIRST_TIME_EXPERIENCE
       value: 1

tools/releaseBuild/azureDevOps/templates/windows-packaging.yml

@@ -14,7 +14,9 @@ jobs:
   condition: succeeded()
   dependsOn: ${{ parameters.parentJob }}
   pool:
-    vmImage: windows-latest
+    name: PowerShell1ES
+    demands:
+    - ImageOverride -equals MMS2019
   variables:
     - name: BuildConfiguration
       value: ${{ parameters.BuildConfiguration }}