Build Type: Azure Pipelines
This is a SLSA Provenance
buildType that describes the execution of an Azure Pipeline workflow.
This build type was inspired by the GitHub Actions build type described here.
buildType describes the execution of an Azure Pipelines workflow that builds a software artifact.
Only the following trigger types are supported:
|Supported event type||Event description|
|A user manually queued the build.|
|CI triggered by a Git push or a TFVC check-in.|
|CI triggered by a Git push or a TFVC check-in, and the Batch changes was selected.|
|Starts your pipeline based on a schedule, such as a nightly build.|
|The build was triggered by a resource trigger or it was triggered by another build.|
A list of all event type values can be found on the variables page under the
All external parameters are REQUIRED unless empty.
|object||The workflow that was run|
|string||The pipeline name for the workflow|
|string||URI of the git repository|
|string||A git reference to the commit|
|string||Path to the workflow YAML file|
|object||The job definition for the build|
|string||The name of the job|
|string||UUID defining job ID|
|object||The specific build that generated the provenance|
|string||The build ID|
|string||Number attempt for the specified build ID|
|string||The full web URL for the build|
"name": "Azure Test Pipeline",
"jobName": "Build Job",
All internal parameters are OPTIONAL.
This build type doesn't use internal parameters.
resolvedDependencies SHOULD contain an entry identifying the resolved git commit ID corresponding to
externalParameters.workflow. The dependency's URI MUST be in SPDX Download Location format, i.e.,
"git+" + workflow.uri + "@" + workflow.ref.
The builder.id MUST represent the entity that generated the provenance, as per the SLSA Provenance documentation. In practice, this is the workflow reference such as
<server_url> + <job_workflow_ref>.
invocationId SHOULD be set to
<server_url> + "/azure/runs/" + <azure.run_id> + "/attempts/" + <azure.run_attempt>.
startedOn MAY contain the time when the build started.