Remove package verification from the notice pipeline#27289
Merged
daxian-dbw merged 1 commit intoPowerShell:masterfrom Apr 17, 2026
Merged
Remove package verification from the notice pipeline#27289daxian-dbw merged 1 commit intoPowerShell:masterfrom
daxian-dbw merged 1 commit intoPowerShell:masterfrom
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Removes local package-license verification/harvesting from the notice generation pipeline and deletes the in-repo clearlyDefined tooling now intended to live in the Infrastructure repo, aligning notice generation with the updated “Release Prep” ownership of cgmanifest.json.
Changes:
- Delete
tools/findMissingNotices.ps1(previously used to rebuild/updatecgmanifest.json/TPN-related manifests). - Remove the
clearlyDefinedtool/module/scripts fromtools/clearlyDefined/. - Simplify the notice pipeline by removing the “Verify that packages have license data” step and the related
SkipVerifyPackagesparameter.
Reviewed changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| tools/findMissingNotices.ps1 | Removed the script previously used to rebuild/update component governance manifests. |
| tools/clearlyDefined/src/ClearlyDefined/ClearlyDefined.psm1 | Removed the ClearlyDefined PowerShell module implementation from this repo. |
| tools/clearlyDefined/readme.md | Removed documentation for the in-repo ClearlyDefined tooling. |
| tools/clearlyDefined/Find-LastHarvestedVersion.ps1 | Removed helper used for harvested-version fallback logic. |
| tools/clearlyDefined/ClearlyDefined.ps1 | Removed the entrypoint script for testing/harvesting ClearlyDefined data. |
| .pipelines/templates/compliance/generateNotice.yml | Removed the package license-data verification step and the SkipVerifyPackages parameter. |
| .pipelines/apiscan-gen-notice.yml | Removed the SkipVerifyPackages pipeline parameter passthrough to the notice template. |
jshigetomi
approved these changes
Apr 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PR Summary
Now that the "Release Prep" workflow does the work to update
cgmanifest.json, we should remove package verification from the notice pipeline.