From b49d2cfeda6bcdcefe1cd8c19be5c55297dfd531 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 13:00:34 -0500
Subject: [PATCH 01/24] Try new pipelines

---
 .azure-pipelines/1esmain.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index c6648b0b..04b2a973 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -21,7 +21,7 @@ resources:
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
-      ref: main
+      ref: bmw/pipelinesv2
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
@@ -31,4 +31,4 @@ variables:
 
 # Use those templates
 extends:
-  template: azure-pipelines/1esmain.yml@azExtTemplates
+  template: azure-pipelines/v2/1es-main.yml@azExtTemplates

From 2a30847f1ad69253cb930c033b41eaf653d6c0d2 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 13:52:44 -0500
Subject: [PATCH 02/24] Params from shared file

---
 .azure-pipelines/1esmain.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 04b2a973..53b811d2 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -32,3 +32,5 @@ variables:
 # Use those templates
 extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
+  parameters:
+    - template: azure-pipelines/v2/parameters.azcode.yml@azExtTemplates

From 5d89cdc40652ff2e49244d154ddc05b510a95628 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 13:53:42 -0500
Subject: [PATCH 03/24] Another way

---
 .azure-pipelines/1esmain.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 53b811d2..202bdc34 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -29,8 +29,9 @@ variables:
   - name: TeamName
     value: "Container Tools Team"
 
+parameters:
+  - template: azure-pipelines/v2/parameters.azcode.yml@azExtTemplates
+
 # Use those templates
 extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
-  parameters:
-    - template: azure-pipelines/v2/parameters.azcode.yml@azExtTemplates

From 67a648a88b965c1376774605e9bb2628b61bce99 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 13:59:34 -0500
Subject: [PATCH 04/24] Try the example?

---
 .azure-pipelines/1esmain.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 202bdc34..7cda7b2b 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -28,10 +28,10 @@ variables:
   # Required by MicroBuild template
   - name: TeamName
     value: "Container Tools Team"
-
-parameters:
-  - template: azure-pipelines/v2/parameters.azcode.yml@azExtTemplates
+  - template: azure-pipelines/v2/variables.azcode.yml@azExtTemplates
 
 # Use those templates
 extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
+  parameters:
+    buildPool: ${{ variables.buildPool }}

From 1a95e657f890c49604eca3c86332986508ba9403 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 14:03:44 -0500
Subject: [PATCH 05/24] Try this...

---
 .azure-pipelines/1esmain.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 7cda7b2b..5eaf29b3 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -34,4 +34,4 @@ variables:
 extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
   parameters:
-    buildPool: ${{ variables.buildPool }}
+    testServiceConnection: ${{ variables.testServiceConnection }}

From 859138ae3bc0f085d5512c8b1b0a857bb9c4cd1d Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 14:22:24 -0500
Subject: [PATCH 06/24] Try something new

---
 .azure-pipelines/1esmain.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 5eaf29b3..e5b4855d 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -34,4 +34,4 @@ variables:
 extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
   parameters:
-    testServiceConnection: ${{ variables.testServiceConnection }}
+    lintInCI: ${{ variables.lintInCI }}

From 761c320f0e334c3a6482dba01388dd25e5a81622 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 16:52:45 -0500
Subject: [PATCH 07/24] Try out sc

---
 .azure-pipelines/1esmain.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index e5b4855d..5eaf29b3 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -34,4 +34,4 @@ variables:
 extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
   parameters:
-    lintInCI: ${{ variables.lintInCI }}
+    testServiceConnection: ${{ variables.testServiceConnection }}

From b7b396a45c65b44b3494ab916b257a49251760fc Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 11 Dec 2025 17:19:36 -0500
Subject: [PATCH 08/24] New attempt

---
 .azure-pipelines/1esmain.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 5eaf29b3..6fbd0683 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -35,3 +35,4 @@ extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
   parameters:
     testServiceConnection: ${{ variables.testServiceConnection }}
+    signType: none # Temporarily disable signing so it goes faster

From 0af371fb48822c00303c9525c7dd4354558ebe87 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Mon, 15 Dec 2025 12:29:32 -0500
Subject: [PATCH 09/24] Reenable signing

---
 .azure-pipelines/1esmain.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 6fbd0683..5eaf29b3 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -35,4 +35,3 @@ extends:
   template: azure-pipelines/v2/1es-main.yml@azExtTemplates
   parameters:
     testServiceConnection: ${{ variables.testServiceConnection }}
-    signType: none # Temporarily disable signing so it goes faster

From fff484bbfdfe7a7710fee705bef79d753104055b Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Mon, 15 Dec 2025 14:26:17 -0500
Subject: [PATCH 10/24] Changes

---
 .azure-pipelines/1esmain.yml |  2 +-
 .azure-pipelines/release.yml | 11 +++--------
 2 files changed, 4 insertions(+), 9 deletions(-)

diff --git a/.azure-pipelines/1esmain.yml b/.azure-pipelines/1esmain.yml
index 5eaf29b3..f05bf374 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.azure-pipelines/1esmain.yml
@@ -28,7 +28,7 @@ variables:
   # Required by MicroBuild template
   - name: TeamName
     value: "Container Tools Team"
-  - template: azure-pipelines/v2/variables.azcode.yml@azExtTemplates
+  - template: azure-pipelines/v2/azcode.variables.yml@azExtTemplates
 
 # Use those templates
 extends:
diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index 328d9c55..90019de0 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -10,14 +10,11 @@ parameters:
     default: false
 
 resources:
-  pipelines:
-    - pipeline: build # This must be "build"
-      source: \Azure Tools\VSCode\Extensions\vscode-containers # name of the pipeline that produces the artifacts
   repositories:
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
-      ref: main
+      ref: bmw/pipelinesv2
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
@@ -27,10 +24,8 @@ variables:
 
 # Use those templates
 extends:
-  template: azure-pipelines/release-extension.yml@azExtTemplates
+  template: azure-pipelines/v2/1es-release-extension.yml@azExtTemplates
   parameters:
     publishVersion: ${{ parameters.publishVersion }}
     dryRun: ${{ parameters.dryRun }}
-    environmentName: VSCodeDockerExtensionPublish
-    publishCommands: # Temporary for Authentication Challenges proposed API
-      - "vsce publish --azure-credential --packagePath vscode-containers-${{ parameters.publishVersion }}.vsix --manifestPath extension.manifest --signaturePath extension.signature.p7s --allow-proposed-apis authenticationChallenges"
+    artifactPipeline: \Azure Tools\VSCode\Extensions\vscode-containers

From e01b5502c812347be09e9f1edbe86ba046b57252 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Mon, 15 Dec 2025 14:27:37 -0500
Subject: [PATCH 11/24] Missing var

---
 .azure-pipelines/release.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index 90019de0..355ca581 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -21,6 +21,7 @@ variables:
   # Required by MicroBuild template
   - name: TeamName
     value: "Container Tools Team"
+  - template: azure-pipelines/v2/azcode.variables.yml@azExtTemplates
 
 # Use those templates
 extends:
@@ -29,3 +30,4 @@ extends:
     publishVersion: ${{ parameters.publishVersion }}
     dryRun: ${{ parameters.dryRun }}
     artifactPipeline: \Azure Tools\VSCode\Extensions\vscode-containers
+    extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}

From d8c4943ac8786ba5da81a5639ee2e4bbed8490a4 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Mon, 15 Dec 2025 14:33:46 -0500
Subject: [PATCH 12/24] Fix missing var

---
 .azure-pipelines/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index 355ca581..f03b3afc 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -31,3 +31,4 @@ extends:
     dryRun: ${{ parameters.dryRun }}
     artifactPipeline: \Azure Tools\VSCode\Extensions\vscode-containers
     extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
+    packageToPublish: vscode-containers

From 67c7dbc37b72e39860efc075aed77cc9df6153ff Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Mon, 15 Dec 2025 14:36:20 -0500
Subject: [PATCH 13/24] Backing up

---
 .azure-pipelines/release.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index f03b3afc..4eb86024 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -16,6 +16,8 @@ resources:
       name: microsoft/vscode-azuretools
       ref: bmw/pipelinesv2
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
+    - pipeline: build
+      source: \Azure Tools\VSCode\Extensions\vscode-containers # name of the pipeline that produces the artifacts
 
 variables:
   # Required by MicroBuild template
@@ -29,6 +31,5 @@ extends:
   parameters:
     publishVersion: ${{ parameters.publishVersion }}
     dryRun: ${{ parameters.dryRun }}
-    artifactPipeline: \Azure Tools\VSCode\Extensions\vscode-containers
     extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
     packageToPublish: vscode-containers

From 706fbd06b43d56dc689cf97dafa91457db95bee9 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Mon, 15 Dec 2025 14:37:53 -0500
Subject: [PATCH 14/24] Backing up more

---
 .azure-pipelines/release.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index 4eb86024..705f7351 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -10,14 +10,15 @@ parameters:
     default: false
 
 resources:
+  pipelines:
+    - pipeline: build # This must be "build"
+      source: \Azure Tools\VSCode\Extensions\vscode-containers # name of the pipeline that produces the artifacts
   repositories:
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
       ref: bmw/pipelinesv2
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
-    - pipeline: build
-      source: \Azure Tools\VSCode\Extensions\vscode-containers # name of the pipeline that produces the artifacts
 
 variables:
   # Required by MicroBuild template

From 7dc26d407821fea0faef7d5b01353fbb161adb82 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Tue, 16 Dec 2025 11:54:39 -0500
Subject: [PATCH 15/24] Try shared params?

---
 .azure-pipelines/params.yml  | 7 +++++++
 .azure-pipelines/release.yml | 2 ++
 2 files changed, 9 insertions(+)
 create mode 100644 .azure-pipelines/params.yml

diff --git a/.azure-pipelines/params.yml b/.azure-pipelines/params.yml
new file mode 100644
index 00000000..c182a277
--- /dev/null
+++ b/.azure-pipelines/params.yml
@@ -0,0 +1,7 @@
+parameters:
+  - name: releasePool
+    type: object
+    default:
+      name: VSEngSS-MicroBuild2022-1ES
+      image: server2022-microbuildVS2022-1es
+      os: windows
diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index 705f7351..89d47b92 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -1,6 +1,7 @@
 trigger: none # Only run this pipeline when manually triggered
 
 parameters:
+  - extends: ./params.yml
   - name: publishVersion
     displayName: Version to publish
     type: string
@@ -34,3 +35,4 @@ extends:
     dryRun: ${{ parameters.dryRun }}
     extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
     packageToPublish: vscode-containers
+    releasePool: ${{ parameters.releasePool }}

From 48ee7e0e9903b65ad070472b81f44f2227481b0d Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Tue, 16 Dec 2025 11:56:40 -0500
Subject: [PATCH 16/24] Try another

---
 .azure-pipelines/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index 89d47b92..d635f272 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -1,7 +1,7 @@
 trigger: none # Only run this pipeline when manually triggered
 
 parameters:
-  - extends: ./params.yml
+  - template: ./params.yml
   - name: publishVersion
     displayName: Version to publish
     type: string

From 807a08abc3b270824329a11670eb37afc1c77f2c Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Tue, 16 Dec 2025 11:57:38 -0500
Subject: [PATCH 17/24] I guess not

---
 .azure-pipelines/params.yml  | 7 -------
 .azure-pipelines/release.yml | 2 --
 2 files changed, 9 deletions(-)
 delete mode 100644 .azure-pipelines/params.yml

diff --git a/.azure-pipelines/params.yml b/.azure-pipelines/params.yml
deleted file mode 100644
index c182a277..00000000
--- a/.azure-pipelines/params.yml
+++ /dev/null
@@ -1,7 +0,0 @@
-parameters:
-  - name: releasePool
-    type: object
-    default:
-      name: VSEngSS-MicroBuild2022-1ES
-      image: server2022-microbuildVS2022-1es
-      os: windows
diff --git a/.azure-pipelines/release.yml b/.azure-pipelines/release.yml
index d635f272..705f7351 100644
--- a/.azure-pipelines/release.yml
+++ b/.azure-pipelines/release.yml
@@ -1,7 +1,6 @@
 trigger: none # Only run this pipeline when manually triggered
 
 parameters:
-  - template: ./params.yml
   - name: publishVersion
     displayName: Version to publish
     type: string
@@ -35,4 +34,3 @@ extends:
     dryRun: ${{ parameters.dryRun }}
     extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
     packageToPublish: vscode-containers
-    releasePool: ${{ parameters.releasePool }}

From 16495670a9feac43c3f1692c3b3f46331ff906ff Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Wed, 28 Jan 2026 11:08:59 -0500
Subject: [PATCH 18/24] Delete files we don't need anymore

---
 .azure-pipelines/SignExtension.signproj       | 29 -------------------
 .../compliance/CredScanSuppressions.json      |  5 ----
 .../compliance/PoliCheckExclusions.xml        | 11 -------
 3 files changed, 45 deletions(-)
 delete mode 100644 .azure-pipelines/SignExtension.signproj
 delete mode 100644 .azure-pipelines/compliance/CredScanSuppressions.json
 delete mode 100644 .azure-pipelines/compliance/PoliCheckExclusions.xml

diff --git a/.azure-pipelines/SignExtension.signproj b/.azure-pipelines/SignExtension.signproj
deleted file mode 100644
index 2207d638..00000000
--- a/.azure-pipelines/SignExtension.signproj
+++ /dev/null
@@ -1,29 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project ToolsVersion="Current" Sdk="Microsoft.Build.NoTargets/3.7.56">
-  <PropertyGroup>
-    <TargetFramework>net8.0</TargetFramework>
-  </PropertyGroup>
-  <ItemGroup>
-    <!-- FilesToSign needs to be inside $(OutDir) hence we copy it into
-    $(OutDir) before (from CWD) and move it back outside after the signing -->
-    <FilesToSign Include="$(OutDir)\extension.signature.p7s">
-      <!-- Add the certificate friendly name below -->
-      <Authenticode>VSCodePublisher</Authenticode>
-    </FilesToSign>
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.VisualStudioEng.MicroBuild.Core" Version="1.0.0">
-      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
-      <PrivateAssets>all</PrivateAssets>
-    </PackageReference>
-  </ItemGroup>
-
-  <Target Name="CopySignatureFile" BeforeTargets="SignFiles">
-    <Copy SourceFiles="$(ProjectDir)\..\extension.manifest" DestinationFiles="$(OutDir)\extension.signature.p7s" />
-  </Target>
-
-  <Target Name="CopyBackSignatureFile" AfterTargets="SignFiles">
-    <Copy SourceFiles="$(OutDir)\extension.signature.p7s" DestinationFiles="$(ProjectDir)\..\extension.signature.p7s" />
-  </Target>
-</Project>
diff --git a/.azure-pipelines/compliance/CredScanSuppressions.json b/.azure-pipelines/compliance/CredScanSuppressions.json
deleted file mode 100644
index 7d951a3a..00000000
--- a/.azure-pipelines/compliance/CredScanSuppressions.json
+++ /dev/null
@@ -1,5 +0,0 @@
-// More info at https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/cred-bot-trinity/credential-risk-exposure-defense/troubleshoot_guides/local-suppressions
-{
-    "tool": "Credential Scanner",
-    "suppressions": []
-}
diff --git a/.azure-pipelines/compliance/PoliCheckExclusions.xml b/.azure-pipelines/compliance/PoliCheckExclusions.xml
deleted file mode 100644
index 564475e2..00000000
--- a/.azure-pipelines/compliance/PoliCheckExclusions.xml
+++ /dev/null
@@ -1,11 +0,0 @@
-<PoliCheckExclusions>
-    <!-- More info at https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/sdl-azdo-extension/policheck-build-task#excluding-files-or-folders-from-the-policheck-scan -->
-    <!--Each of these exclusions is a folder name -if \[name]\exists in the file path, it will be skipped -->
-    <Exclusion Type="FolderPathFull">NODE_MODULES|BACKUPTEMPLATES|.VSCODE-TEST|DIST</Exclusion>
-    <!--Each of these exclusions is a folder name -if any folder or file starts with "\[name]", it will be skipped -->
-    <!--<Exclusion Type="FolderPathStart">ABC|XYZ</Exclusion>-->
-    <!--Each of these file types will be completely skipped for the entire scan -->
-    <!--<Exclusion Type="FileType">.ABC|.XYZ</Exclusion>-->
-    <!--The specified file names will be skipped during the scan regardless which folder they are in -->
-    <Exclusion Type="FileName">NOTICE.HTML</Exclusion>
-</PoliCheckExclusions>

From 924d5dc07566f988b3f1e52b6ddbcf7409286720 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Wed, 28 Jan 2026 11:09:11 -0500
Subject: [PATCH 19/24] Move to `.config`

---
 .../1esmain.yml => .config/build.yml          | 74 +++++++++----------
 {.azure-pipelines => .config}/release.yml     |  7 +-
 .../compliance => .config}/tsaoptions.json    | 28 +++----
 3 files changed, 55 insertions(+), 54 deletions(-)
 rename .azure-pipelines/1esmain.yml => .config/build.yml (82%)
 rename {.azure-pipelines => .config}/release.yml (86%)
 rename {.azure-pipelines/compliance => .config}/tsaoptions.json (96%)

diff --git a/.azure-pipelines/1esmain.yml b/.config/build.yml
similarity index 82%
rename from .azure-pipelines/1esmain.yml
rename to .config/build.yml
index f05bf374..70d422ef 100644
--- a/.azure-pipelines/1esmain.yml
+++ b/.config/build.yml
@@ -1,37 +1,37 @@
-# Trigger the build whenever `main` or `rel/*` is updated
-trigger:
-  - main
-  - rel/*
-
-# Disable PR trigger
-pr: none
-
-# Scheduled nightly build of `main`
-schedules:
-  - cron: "0 0 * * *"
-    displayName: Nightly scheduled build
-    always: false # Don't rebuild if there haven't been changes
-    branches:
-      include:
-        - main
-
-# `resources` specifies the location of templates to pick up, use it to get AzExt templates
-resources:
-  repositories:
-    - repository: azExtTemplates
-      type: github
-      name: microsoft/vscode-azuretools
-      ref: bmw/pipelinesv2
-      endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
-
-variables:
-  # Required by MicroBuild template
-  - name: TeamName
-    value: "Container Tools Team"
-  - template: azure-pipelines/v2/azcode.variables.yml@azExtTemplates
-
-# Use those templates
-extends:
-  template: azure-pipelines/v2/1es-main.yml@azExtTemplates
-  parameters:
-    testServiceConnection: ${{ variables.testServiceConnection }}
+# Trigger the build whenever `main` or `rel/*` is updated
+trigger:
+  - main
+  - rel/*
+
+# Disable PR trigger
+pr: none
+
+# Scheduled nightly build of `main`
+schedules:
+  - cron: "0 0 * * *"
+    displayName: Nightly scheduled build
+    always: false # Don't rebuild if there haven't been changes
+    branches:
+      include:
+        - main
+
+# `resources` specifies the location of templates to pick up, use it to get AzExt templates
+resources:
+  repositories:
+    - repository: azExtTemplates
+      type: github
+      name: microsoft/vscode-azuretools
+      ref: bmw/pipelinesv2_2
+      endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
+
+variables:
+  # Required by MicroBuild template
+  - name: TeamName
+    value: "Container Tools Team"
+  - template: azure-pipelines/v2/azcode.variables.yml@azExtTemplates
+
+# Use those templates
+extends:
+  template: azure-pipelines/v2/1es-mb-main.yml@azExtTemplates
+  parameters:
+    testARMServiceConnection: ${{ variables.testARMServiceConnection }}
diff --git a/.azure-pipelines/release.yml b/.config/release.yml
similarity index 86%
rename from .azure-pipelines/release.yml
rename to .config/release.yml
index 705f7351..4a8b96f6 100644
--- a/.azure-pipelines/release.yml
+++ b/.config/release.yml
@@ -17,7 +17,7 @@ resources:
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
-      ref: bmw/pipelinesv2
+      ref: bmw/pipelinesv2_2
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
@@ -28,9 +28,10 @@ variables:
 
 # Use those templates
 extends:
-  template: azure-pipelines/v2/1es-release-extension.yml@azExtTemplates
+  template: azure-pipelines/v2/1es-mb-release-extension.yml@azExtTemplates
   parameters:
+    packageToPublish: vscode-containers
     publishVersion: ${{ parameters.publishVersion }}
     dryRun: ${{ parameters.dryRun }}
     extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
-    packageToPublish: vscode-containers
+    releaseApprovalEnvironment: VSCodeDockerExtensionPublish
diff --git a/.azure-pipelines/compliance/tsaoptions.json b/.config/tsaoptions.json
similarity index 96%
rename from .azure-pipelines/compliance/tsaoptions.json
rename to .config/tsaoptions.json
index 9dc3dd60..82613ce4 100644
--- a/.azure-pipelines/compliance/tsaoptions.json
+++ b/.config/tsaoptions.json
@@ -1,14 +1,14 @@
-{
-    "tsaVersion": "TsaV2",
-    "codeBase": "NewOrUpdate",
-    "codeBaseName": "vscode-containers",
-    "tsaStamp": "DevDiv",
-    "notificationAliases": [
-        "DockerToolsTeam@microsoft.com"
-    ],
-    "instanceUrl": "https://devdiv.visualstudio.com",
-    "projectName": "DevDiv",
-    "areaPath": "DevDiv\\VS Azure Tools\\Container Tools",
-    "iterationPath": "DevDiv",
-    "allTools": true
-}
+{
+    "tsaVersion": "TsaV2",
+    "codeBase": "NewOrUpdate",
+    "codeBaseName": "vscode-containers",
+    "tsaStamp": "DevDiv",
+    "notificationAliases": [
+        "DockerToolsTeam@microsoft.com"
+    ],
+    "instanceUrl": "https://devdiv.visualstudio.com",
+    "projectName": "DevDiv",
+    "areaPath": "DevDiv\\VS Azure Tools\\Container Tools",
+    "iterationPath": "DevDiv",
+    "allTools": true
+}

From dbcec3cb6d70ee475535ff0c0e4c9f68b093f7ec Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Wed, 28 Jan 2026 11:12:03 -0500
Subject: [PATCH 20/24] Ignore new folder

---
 .vscodeignore | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.vscodeignore b/.vscodeignore
index 7f9c00cb..7bf7b7de 100644
--- a/.vscodeignore
+++ b/.vscodeignore
@@ -1,4 +1,4 @@
-.azure-pipelines/**
+.config/**
 .github/**
 .gitattributes
 .gitignore

From 1d05c1f0b5deb4102fb0373f372f2ed20a749226 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 29 Jan 2026 10:55:33 -0500
Subject: [PATCH 21/24] Updates

---
 .config/build.yml   | 6 +++---
 .config/release.yml | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.config/build.yml b/.config/build.yml
index 70d422ef..1c8d8acd 100644
--- a/.config/build.yml
+++ b/.config/build.yml
@@ -21,17 +21,17 @@ resources:
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
-      ref: bmw/pipelinesv2_2
+      ref: bmw/pipelinesv2_2 # TODO: update to final branch
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
   # Required by MicroBuild template
   - name: TeamName
     value: "Container Tools Team"
-  - template: azure-pipelines/v2/azcode.variables.yml@azExtTemplates
+  - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
 
 # Use those templates
 extends:
-  template: azure-pipelines/v2/1es-mb-main.yml@azExtTemplates
+  template: azdo-pipelines/1es-mb-main.yml@azExtTemplates
   parameters:
     testARMServiceConnection: ${{ variables.testARMServiceConnection }}
diff --git a/.config/release.yml b/.config/release.yml
index 4a8b96f6..6e5ad19d 100644
--- a/.config/release.yml
+++ b/.config/release.yml
@@ -17,18 +17,18 @@ resources:
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
-      ref: bmw/pipelinesv2_2
+      ref: bmw/pipelinesv2_2 # TODO: update to final branch
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
   # Required by MicroBuild template
   - name: TeamName
     value: "Container Tools Team"
-  - template: azure-pipelines/v2/azcode.variables.yml@azExtTemplates
+  - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
 
 # Use those templates
 extends:
-  template: azure-pipelines/v2/1es-mb-release-extension.yml@azExtTemplates
+  template: azdo-pipelines/1es-mb-release-extension.yml@azExtTemplates
   parameters:
     packageToPublish: vscode-containers
     publishVersion: ${{ parameters.publishVersion }}

From 1b07c1b8dfa8eeecd595aa6d7eb3c6943be99564 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 29 Jan 2026 11:41:53 -0500
Subject: [PATCH 22/24] Pipeline updates

---
 .config/build.yml   |  9 +++------
 .config/release.yml | 19 +++++++++++--------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.config/build.yml b/.config/build.yml
index 1c8d8acd..4935bbce 100644
--- a/.config/build.yml
+++ b/.config/build.yml
@@ -15,9 +15,9 @@ schedules:
       include:
         - main
 
-# `resources` specifies the location of templates to pick up, use it to get AzExt templates
 resources:
   repositories:
+    # Use the shared templates from microsoft/vscode-azuretools
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
@@ -25,13 +25,10 @@ resources:
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
-  # Required by MicroBuild template
-  - name: TeamName
-    value: "Container Tools Team"
+  # Pick up shared AZCode variables
   - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
 
-# Use those templates
 extends:
-  template: azdo-pipelines/1es-mb-main.yml@azExtTemplates
+  template: azdo-pipelines/1es-mb-main.yml@azExtTemplates # Use the main build template
   parameters:
     testARMServiceConnection: ${{ variables.testARMServiceConnection }}
diff --git a/.config/release.yml b/.config/release.yml
index 6e5ad19d..cfa7e75f 100644
--- a/.config/release.yml
+++ b/.config/release.yml
@@ -1,9 +1,13 @@
-trigger: none # Only run this pipeline when manually triggered
+# Only run this pipeline when manually triggered
+trigger: none
+pr: none
 
 parameters:
+  # The version to publish--used for ensuring the expected version is published
   - name: publishVersion
     displayName: Version to publish
     type: string
+  # Whether to do a dry run (i.e., not actually publish)
   - name: dryRun
     displayName: Dry run
     type: boolean
@@ -11,9 +15,11 @@ parameters:
 
 resources:
   pipelines:
+    # Reference the build pipeline to get the artifacts
     - pipeline: build # This must be "build"
-      source: \Azure Tools\VSCode\Extensions\vscode-containers # name of the pipeline that produces the artifacts
+      source: \Azure Tools\VSCode\Extensions\vscode-containers # Name of the pipeline that produces the artifacts
   repositories:
+    # Use the shared templates from microsoft/vscode-azuretools
     - repository: azExtTemplates
       type: github
       name: microsoft/vscode-azuretools
@@ -21,17 +27,14 @@ resources:
       endpoint: GitHub-AzureTools # The service connection to use when accessing this repository
 
 variables:
-  # Required by MicroBuild template
-  - name: TeamName
-    value: "Container Tools Team"
+  # Pick up shared AZCode variables
   - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
 
-# Use those templates
 extends:
-  template: azdo-pipelines/1es-mb-release-extension.yml@azExtTemplates
+  template: azdo-pipelines/1es-mb-release-extension.yml@azExtTemplates # Use the extension release template
   parameters:
     packageToPublish: vscode-containers
     publishVersion: ${{ parameters.publishVersion }}
     dryRun: ${{ parameters.dryRun }}
-    extensionReleaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
+    releaseServiceConnection: ${{ variables.extensionReleaseServiceConnection }}
     releaseApprovalEnvironment: VSCodeDockerExtensionPublish

From db5f14838ddb9ce5a5af17537db046038d200a85 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:01:12 -0500
Subject: [PATCH 23/24] `TeamName` var

---
 .config/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.config/build.yml b/.config/build.yml
index 4935bbce..6f27c1c5 100644
--- a/.config/build.yml
+++ b/.config/build.yml
@@ -27,6 +27,8 @@ resources:
 variables:
   # Pick up shared AZCode variables
   - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
+  - name: TeamName
+    value: "Container Tools Team" # Required by MicroBuild template
 
 extends:
   template: azdo-pipelines/1es-mb-main.yml@azExtTemplates # Use the main build template

From f043d1ee4b0334607d3a3d91f85602d6bf8f2081 Mon Sep 17 00:00:00 2001
From: "Brandon Waterloo [MSFT]"
 <36966225+bwateratmsft@users.noreply.github.com>
Date: Thu, 29 Jan 2026 16:17:19 -0500
Subject: [PATCH 24/24] `TeamName` var

---
 .config/build.yml   | 2 +-
 .config/release.yml | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.config/build.yml b/.config/build.yml
index 6f27c1c5..f552b141 100644
--- a/.config/build.yml
+++ b/.config/build.yml
@@ -28,7 +28,7 @@ variables:
   # Pick up shared AZCode variables
   - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
   - name: TeamName
-    value: "Container Tools Team" # Required by MicroBuild template
+    value: "Container Tools Team" # Required for MicroBuild signing and telemetry
 
 extends:
   template: azdo-pipelines/1es-mb-main.yml@azExtTemplates # Use the main build template
diff --git a/.config/release.yml b/.config/release.yml
index cfa7e75f..64bd87bd 100644
--- a/.config/release.yml
+++ b/.config/release.yml
@@ -29,6 +29,8 @@ resources:
 variables:
   # Pick up shared AZCode variables
   - template: azdo-pipelines/azcode.variables.yml@azExtTemplates
+  - name: TeamName
+    value: "Container Tools Team" # Required for MicroBuild signing and telemetry
 
 extends:
   template: azdo-pipelines/1es-mb-release-extension.yml@azExtTemplates # Use the extension release template