Fix pipeline warnings (#466)

NuGet.Config

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<configuration>
-  <config>
-    <add key="repositoryPath" value=".\packages" />
-  </config>
-</configuration>

build/DirectXTex-GitHub-CMake-Xbox-Dev17.yml

@@ -30,6 +30,7 @@ variables:
   GDK_EDITION: $(GDKEditionNumber)
   URL_FEED: $(ADOFeedURL)
   GameDKLatest: '$(ExtractedFolder)\GDK\Microsoft.gdk.xbox.$(GDKEditionNumber)\native\$(GDKEditionNumber)\'
+  skipNugetSecurityAnalysis: true # We explicitly call this task so we don't need it to be auto-injected
 
 pool:
   vmImage: windows-2022
@@ -45,23 +46,29 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     # We have to use a nuget.config to provide the feed for the 'nuget install' option.
     displayName: 'NuGet set package source to ADO feed'
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet install PGDK
     inputs:

build/DirectXTex-GitHub-CMake-Xbox.yml

@@ -43,6 +43,7 @@ variables:
   GDK_EDITION: $(GDKEditionNumber)
   URL_FEED: $(ADOFeedURL)
   GameDKLatest: '$(ExtractedFolder)\GDK\Microsoft.gdk.xbox.$(GDKEditionNumber)\native\$(GDKEditionNumber)\'
+  skipNugetSecurityAnalysis: true # We explicitly call this task so we don't need it to be auto-injected
 
 pool:
   vmImage: windows-2019
@@ -58,23 +59,29 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     # We have to use a nuget.config to provide the feed for the 'nuget install' option.
     displayName: 'NuGet set package source to ADO feed'
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet install PGDK
     inputs:

build/DirectXTex-GitHub-GDK-Dev17.yml

@@ -32,6 +32,7 @@ variables:
   GDKEnableBWOI: true
   GITHUB_PAT: $(GITHUBPUBLICTOKEN)
   URL_FEED: $(ADOFeedURL)
+  skipNugetSecurityAnalysis: true # We explicitly call this task so we don't need it to be auto-injected
 
 jobs:
 - job: BUILD_GDK
@@ -46,23 +47,29 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     # We have to use a nuget.config to provide the feed for the 'nuget install' option.
     displayName: 'NuGet set package source to ADO feed'
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet install PGDK
     inputs:

build/DirectXTex-GitHub-GDK.yml

@@ -53,6 +53,7 @@ variables:
   GDKEnableBWOI: true
   GITHUB_PAT: $(GITHUBPUBLICTOKEN)
   URL_FEED: $(ADOFeedURL)
+  skipNugetSecurityAnalysis: true # We explicitly call this task so we don't need it to be auto-injected
 
 jobs:
 - job: BUILD_GDK
@@ -67,23 +68,29 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     # We have to use a nuget.config to provide the feed for the 'nuget install' option.
     displayName: 'NuGet set package source to ADO feed'
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet install PGDK
     inputs:

build/DirectXTex-GitHub-SDK-prerelease.yml

@@ -28,6 +28,7 @@ variables:
   EXTRACTED_FOLDER: $(ExtractedFolder)
   WSDKEnableBWOI: true
   URL_FEED: $(ADOFeedURL)
+  skipNugetSecurityAnalysis: true # We explicitly call this task so we don't need it to be auto-injected
 
 pool:
   vmImage: windows-2022
@@ -45,23 +46,29 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     # We have to use a nuget.config to provide the feed for the 'nuget install' option.
     displayName: 'NuGet set package source to ADO feed'
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet Install WSDK x64
     inputs:
@@ -166,22 +173,28 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     displayName: NuGet set package source to ADO feed
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet Install WSDK x64
     inputs:

build/DirectXTex-GitHub-SDK-release.yml

@@ -28,6 +28,7 @@ variables:
   EXTRACTED_FOLDER: $(ExtractedFolder)
   WSDKEnableBWOI: true
   URL_FEED: $(ADOFeedURL)
+  skipNugetSecurityAnalysis: true # We explicitly call this task so we don't need it to be auto-injected
 
 pool:
   vmImage: windows-2022
@@ -45,23 +46,29 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     # We have to use a nuget.config to provide the feed for the 'nuget install' option.
     displayName: 'NuGet set package source to ADO feed'
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet Install WSDK x64
     inputs:
@@ -166,22 +173,28 @@ jobs:
     displayName: 'Use NuGet'
     inputs:
       versionSpec: '6.5.x'
+  - task: PowerShell@2
+    displayName: 'Create nuget.config with single source'
+    inputs:
+      targetType: inline
+      script: |
+        $xml = @'
+        <?xml version="1.0" encoding="utf-8"?>
+        <configuration>
+          <packageSources>
+            <clear />
+          </packageSources>
+        </configuration>
+        '@
+        $xml | Set-Content -Path "$(Build.SourcesDirectory)\NuGet.config"
+
   - task: NuGetCommand@2
     displayName: NuGet set package source to ADO feed
     inputs:
       command: custom
-      arguments: sources add -Name xboxgdk-DirectXTex -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
-  - task: PowerShell@2
-    displayName: 'Set nuget.config to single source'
-    inputs:
-      targetType: inline
-      script: |
-        $file = '.\NuGet.Config'
-        $doc = [xml](Get-Content $file)
-        $newelement = $doc.CreateElement("clear")
-        $clearadd = $doc.configuration.packageSources.PrependChild($newelement)
-        $doc.OuterXml | Set-Content $file
-
+      arguments: sources add -Name xboxgdk -Source $(URL_FEED) -ConfigFile $(Build.SourcesDirectory)\NuGet.config
+  - task: nuget-security-analysis@0
+    displayName: 'Secure Supply Chain Analysis'
   - task: NuGetCommand@2
     displayName: NuGet Install WSDK x64
     inputs: