Skip to content

Enable SDL autobaselining for GitHub repo#4816

Draft
timotheeguerin wants to merge 1 commit into
mainfrom
timotheeguerin/enable-sdl-autobaseline
Draft

Enable SDL autobaselining for GitHub repo#4816
timotheeguerin wants to merge 1 commit into
mainfrom
timotheeguerin/enable-sdl-autobaseline

Conversation

@timotheeguerin

Copy link
Copy Markdown
Member

What

Adds autobaseline to the sdl: config in eng/pipelines/templates/1es-redirect.yml:

sdl:
  autobaseline:
    enableForGitHub: true
    isEnabledForAllTools: true

Why

Addresses the recurring 1ES PT warning:

Your pipeline is not yet baselined for any existing SDL violations and running SDL tools in no-break mode. Once your YAMLs are checked in, run your pipeline on the default branch of your repo to trigger automatic generation of baselines by 1ES PT.

  • enableForGitHub: true is required for autobaselining to engage on a GitHub-hosted repo.
  • isEnabledForAllTools: true baselines all SDL tools (credscan, psscriptanalyzer, etc.).

The .gdnbaselines baseline is generated automatically on the next pipeline run on main, after which the no-break-mode warning clears.

Out of scope

  • Branch-validation warning — inherent 1ES limitation for GitHub repos; not suppressible.
  • Component Governance alerts — tracked separately.

@azure-sdk-automation

Copy link
Copy Markdown
Contributor

No changes needing a change description found.

@azure-sdk-automation

Copy link
Copy Markdown
Contributor

You can try these changes here

🛝 Playground 🌐 Website

@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

⚡ Benchmark Results

⚠️ 25 metric(s) regressed above the +5% threshold:

Metric Baseline Current Change
total 🔴 954.6ms 🔴 1.07s +12.3% 🔴
loader 🟡 288.6ms 🟡 330.2ms +14.4% 🔴
resolver 🟢 37.8ms 🟢 40.9ms +8.2% 🔴
checker 🟡 342.3ms 🟡 387.3ms +13.1% 🔴
validation 🟢 80.6ms 🟢 87.6ms +8.6% 🔴
 ↳ validation/@azure-tools/typespec-azure-core 🟡 11.8ms 🟡 13.4ms +13.9% 🔴
 ↳ validation/@typespec/http 🟡 14.4ms 🟡 16.2ms +12.6% 🔴
 ↳ validation/@typespec/versioning 🔴 49.2ms 🔴 52.2ms +6.2% 🔴
linter 🟡 202.5ms 🟡 226.0ms +11.6% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/no-header-explode 🔴 25.0ms 🔴 28.2ms +12.8% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/no-query-explode 🔴 26.1ms 🔴 29.6ms +13.2% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/no-response-body 🔴 31.5ms 🔴 35.0ms +11.3% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/response-schema-problem 🔴 30.8ms 🔴 34.2ms +11.3% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-agent-base-type-child-resources 🟡 19.3ms 🔴 23.5ms +22.1% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-common-types-version 🟡 11.2ms 🟡 13.3ms +18.4% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-no-path-casing-conflicts 🟡 15.8ms 🟡 18.1ms +14.5% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/lro-location-header 🟡 18.4ms 🔴 20.9ms +13.6% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/no-response-body 🔴 27.9ms 🔴 31.8ms +13.8% 🔴
emit 🔴 5.82s 🔴 6.32s +8.6% 🔴
 ↳ emit/@azure-tools/typespec-autorest 🟢 118.3ms 🟢 130.7ms +10.4% 🔴
 ↳ emit/@azure-tools/typespec-python 🔴 2.18s 🔴 2.36s +8.3% 🔴
 ↳ emit/@typespec/http-client-js 🔴 544.0ms 🔴 595.3ms +9.4% 🔴
 ↳ emit/@typespec/openapi3 🟢 101.8ms 🟢 112.2ms +10.3% 🔴
 ↳ emit/@typespec/openapi3/compute 🟢 88.3ms 🟢 97.6ms +10.6% 🔴
 ↳ emit/@typespec/openapi3/write 🟢 13.2ms 🟢 14.3ms +8.9% 🔴
Full details – comparing 68bd7ad vs baseline rolling-baseline-8568814-3c8fb59 (rolling baseline (20 main runs))
Metric Baseline Current Change
total 🔴 954.6ms 🔴 1.07s +12.3% 🔴
loader 🟡 288.6ms 🟡 330.2ms +14.4% 🔴
resolver 🟢 37.8ms 🟢 40.9ms +8.2% 🔴
checker 🟡 342.3ms 🟡 387.3ms +13.1% 🔴
validation 🟢 80.6ms 🟢 87.6ms +8.6% 🔴
 ↳ validation/@azure-tools/typespec-azure-core 🟡 11.8ms 🟡 13.4ms +13.9% 🔴
 ↳ validation/@typespec/http 🟡 14.4ms 🟡 16.2ms +12.6% 🔴
 ↳ validation/@typespec/rest 🟢 1.5ms 🟢 1.6ms +7.1%
 ↳ validation/@typespec/versioning 🔴 49.2ms 🔴 52.2ms +6.2% 🔴
 ↳ validation/compiler 🟢 3.7ms 🟢 4.0ms +9.0%
linter 🟡 202.5ms 🟡 226.0ms +11.6% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/auth-required 🟢 0.1ms 🟢 0.1ms +15.6%
 ↳ linter/@azure-tools/typespec-azure-core/bad-record-type 🟢 0.6ms 🟢 0.6ms +7.0%
 ↳ linter/@azure-tools/typespec-azure-core/byos 🟢 7.9ms 🟢 8.7ms +10.2%
 ↳ linter/@azure-tools/typespec-azure-core/casing-style 🟢 1.4ms 🟢 1.5ms +9.3%
 ↳ linter/@azure-tools/typespec-azure-core/composition-over-inheritance 🟢 0.2ms 🟢 0.2ms +9.0%
 ↳ linter/@azure-tools/typespec-azure-core/documentation-required 🟢 1.8ms 🟢 2.0ms +10.6%
 ↳ linter/@azure-tools/typespec-azure-core/friendly-name 🟢 1.3ms 🟢 1.5ms +10.8%
 ↳ linter/@azure-tools/typespec-azure-core/key-visibility-required 🟢 0.3ms 🟢 0.4ms +12.1%
 ↳ linter/@azure-tools/typespec-azure-core/known-encoding 🟢 0.5ms 🟢 0.5ms +13.1%
 ↳ linter/@azure-tools/typespec-azure-core/long-running-polling-operation-required 🟢 0.8ms 🟢 0.8ms +9.5%
 ↳ linter/@azure-tools/typespec-azure-core/no-case-mismatch 🟢 0.7ms 🟢 0.7ms +8.1%
 ↳ linter/@azure-tools/typespec-azure-core/no-closed-literal-union 🟢 0.9ms 🟢 1.0ms +10.0%
 ↳ linter/@azure-tools/typespec-azure-core/no-enum 🟢 0.2ms 🟢 0.3ms +11.4%
 ↳ linter/@azure-tools/typespec-azure-core/no-error-status-codes 🟢 0.3ms 🟢 0.3ms +9.5%
 ↳ linter/@azure-tools/typespec-azure-core/no-explicit-routes-resource-ops 🟢 0.2ms 🟢 0.2ms +9.9%
 ↳ linter/@azure-tools/typespec-azure-core/no-format 🟢 0.8ms 🟢 0.8ms +7.6%
 ↳ linter/@azure-tools/typespec-azure-core/no-generic-numeric 🟢 0.8ms 🟢 0.9ms +9.4%
 ↳ linter/@azure-tools/typespec-azure-core/no-header-explode 🔴 25.0ms 🔴 28.2ms +12.8% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/no-legacy-usage 🟢 1.9ms 🟢 2.1ms +13.1%
 ↳ linter/@azure-tools/typespec-azure-core/no-multiple-discriminator 🟢 0.2ms 🟢 0.3ms +20.1%
 ↳ linter/@azure-tools/typespec-azure-core/no-nullable 🟢 0.4ms 🟢 0.4ms +10.1%
 ↳ linter/@azure-tools/typespec-azure-core/no-offsetdatetime 🟢 1.8ms 🟢 2.1ms +11.7%
 ↳ linter/@azure-tools/typespec-azure-core/no-openapi 🟢 2.2ms 🟢 2.3ms +4.9%
 ↳ linter/@azure-tools/typespec-azure-core/no-private-usage 🟢 2.9ms 🟢 3.3ms +13.0%
 ↳ linter/@azure-tools/typespec-azure-core/no-query-explode 🔴 26.1ms 🔴 29.6ms +13.2% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/no-response-body 🔴 31.5ms 🔴 35.0ms +11.3% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/no-rest-library-interfaces 🟢 0.1ms 🟢 0.1ms +18.7%
 ↳ linter/@azure-tools/typespec-azure-core/no-route-parameter-name-mismatch 🟢 7.2ms 🟢 8.1ms +13.4%
 ↳ linter/@azure-tools/typespec-azure-core/no-rpc-path-params 🟢 0.4ms 🟢 0.4ms +11.7%
 ↳ linter/@azure-tools/typespec-azure-core/no-string-discriminator 🟢 0.1ms 🟢 0.1ms +14.6%
 ↳ linter/@azure-tools/typespec-azure-core/no-unknown 🟢 0.3ms 🟢 0.4ms +12.5%
 ↳ linter/@azure-tools/typespec-azure-core/no-unnamed-union 🟢 0.7ms 🟢 0.8ms +9.3%
 ↳ linter/@azure-tools/typespec-azure-core/operation-missing-api-version 🟢 0.3ms 🟢 0.4ms +7.5%
 ↳ linter/@azure-tools/typespec-azure-core/request-body-problem 🟢 0.4ms 🟢 0.5ms +6.2%
 ↳ linter/@azure-tools/typespec-azure-core/require-versioned 🟢 0.1ms 🟢 0.1ms +18.7%
 ↳ linter/@azure-tools/typespec-azure-core/response-schema-problem 🔴 30.8ms 🔴 34.2ms +11.3% 🔴
 ↳ linter/@azure-tools/typespec-azure-core/rpc-operation-request-body 🟢 0.7ms 🟢 0.7ms +13.0%
 ↳ linter/@azure-tools/typespec-azure-core/spread-discriminated-model 🟢 0.4ms 🟢 0.5ms +11.2%
 ↳ linter/@azure-tools/typespec-azure-core/use-standard-names 🟢 7.2ms 🟢 8.1ms +12.7%
 ↳ linter/@azure-tools/typespec-azure-core/use-standard-operations 🟢 0.2ms 🟢 0.3ms +8.0%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-agent-base-type-child-resources 🟡 19.3ms 🔴 23.5ms +22.1% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-agent-base-type-lifecycle-operations 🟢 0.2ms 🟢 0.3ms +9.2%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-common-types-version 🟡 11.2ms 🟡 13.3ms +18.4% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-custom-resource-no-key 🟢 0.2ms 🟢 0.2ms +19.6%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-custom-resource-usage-discourage 🟢 0.1ms 🟢 0.1ms +17.8%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-delete-operation-response-codes 🟢 5.2ms 🟢 4.6ms -11.1%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-no-path-casing-conflicts 🟡 15.8ms 🟡 18.1ms +14.5% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-no-record 🟢 0.6ms 🟢 0.7ms +11.2%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-post-operation-response-codes 🟢 1.3ms 🟢 1.4ms +5.7%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-put-operation-response-codes 🟢 0.2ms 🟢 0.2ms +4.9%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-action-no-segment 🟢 0.4ms 🟢 0.5ms +11.5%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-duplicate-property 🟢 0.3ms 🟢 0.4ms +18.4%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-interface-requires-decorator 🟢 0.1ms 🟢 0.1ms +15.2%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-invalid-action-verb 🟢 0.1ms 🟢 0.2ms +9.1%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-invalid-envelope-property 🟢 0.2ms 🟢 0.3ms +20.0%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-invalid-version-format 🟢 0.2ms 🟢 0.2ms +9.6%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-key-invalid-chars 🟢 0.4ms 🟢 0.5ms +19.1%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-name-pattern 🟢 0.1ms 🟢 0.1ms +10.4%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-operation 🟢 0.5ms 🟢 0.6ms +14.2%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-operation-response 🟢 8.4ms 🟢 9.2ms +9.1%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-patch 🟢 0.8ms 🟢 0.8ms +8.0%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-path-segment-invalid-chars 🟢 0.4ms 🟢 0.4ms +11.9%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/arm-resource-provisioning-state 🟢 0.4ms 🟢 0.4ms +11.7%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/beyond-nesting-levels 🟢 0.2ms 🟢 0.2ms +17.5%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/empty-updateable-properties 🟢 0.4ms 🟢 0.4ms +13.2%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/improper-subscription-list-operation 🟢 0.1ms 🟢 0.1ms +16.3%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/lro-location-header 🟡 18.4ms 🔴 20.9ms +13.6% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/missing-operations-endpoint 🟢 0.1ms 🟢 0.2ms +18.1%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/missing-x-ms-identifiers 🟢 0.9ms 🟢 1.0ms +9.3%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/no-empty-model 🟢 0.2ms 🟢 0.3ms +20.3%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/no-override-props 🟢 0.3ms 🟢 0.3ms +17.0%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/no-resource-delete-operation 🟢 0.4ms 🟢 0.5ms +20.5%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/no-response-body 🔴 27.9ms 🔴 31.8ms +13.8% 🔴
 ↳ linter/@azure-tools/typespec-azure-resource-manager/patch-envelope 🟢 0.4ms 🟢 0.4ms +13.2%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/resource-name 🟢 0.4ms 🟢 0.5ms +10.7%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/secret-prop 🟢 5.1ms 🟢 5.6ms +9.5%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/unsupported-type 🟢 0.6ms 🟢 0.7ms +12.1%
 ↳ linter/@azure-tools/typespec-azure-resource-manager/version-progression 🟢 0.3ms 🟢 0.3ms +7.5%
 ↳ linter/@azure-tools/typespec-client-generator-core/property-name-conflict 🟢 2.1ms 🟢 2.4ms +10.3%
 ↳ linter/@azure-tools/typespec-client-generator-core/require-client-suffix 🟢 1.5ms 🟢 1.7ms +13.4%
emit 🔴 5.82s 🔴 6.32s +8.6% 🔴
 ↳ emit/@Azure-Tools 🟢 0.0ms 🟢 0.0ms +0.0%
 ↳ emit/@azure-tools/typespec-autorest 🟢 118.3ms 🟢 130.7ms +10.4% 🔴
 ↳ emit/@azure-tools/typespec-python 🔴 2.18s 🔴 2.36s +8.3% 🔴
 ↳ emit/@typespec 🟢 0.0ms 🟢 0.0ms +0.0%
 ↳ emit/@typespec/http-client-js 🔴 544.0ms 🔴 595.3ms +9.4% 🔴
 ↳ emit/@typespec/openapi3 🟢 101.8ms 🟢 112.2ms +10.3% 🔴
 ↳ emit/@typespec/openapi3/compute 🟢 88.3ms 🟢 97.6ms +10.6% 🔴
 ↳ emit/@typespec/openapi3/write 🟢 13.2ms 🟢 14.3ms +8.9% 🔴

Averaged across 3 specs (azure-arm-resource-manager, azure-core-dataplane, azure-full).
Threshold: changes > ±5% are highlighted.
🟢 Fast · 🟡 Moderate (stages >200ms, rules >10ms) · 🔴 Slow (stages >400ms, rules >20ms)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant