Add azure pipeline CI

[janechu]

Pull Request

📖 Description

This is the first step in replacing the github pipeline with an azure pipeline in order to add additional security checks.

👩‍💻 Reviewer Notes

Unfortunately, there is no way to test this until it is on the master branch. The steps mirror those found in the current CI.

📑 Test Plan

• Commit this change
• Test run in Azure
• Fix any issues

✅ Checklist

General

• I have included a change request file using $ npm run change
• I have added tests for my changes.
• I have tested my changes.
• I have updated the project documentation to reflect my changes.
• I have read the CONTRIBUTING documentation and followed the standards for this project.

[awentzel]

Hi Jane,
I'm curious what security checks are needed that GitHub doesn't have. GitHub has been leading the way with their security tools so it's a surprising twist I'd like to learn more about. Thanks

[janechu]

Hi Jane, I'm curious what security checks are needed that GitHub doesn't have. GitHub has been leading the way with their security tools so it's a surprising twist I'd like to learn more about. Thanks

It is Microsoft policy to use "Governed Pipeline Templates" for the entire organization where production code is involved, and the check we don't have specifically is their credential scanning, so we have 2 gaps we're filling with this.

Edit: Also to note, we are in an evolving landscape, so using the governed pipeline templates makes it easier for security teams to add/update certain checks without us re-visiting or having to directly be involved in the process.