Context

In order to secure what code we push into which VMR branch, we want to encode this logic in C# with appropriate tests rather than bash commands calling git push directly. That's why we will have a "push" command in the tooling which will have this logic inside.

Goal

• Add a new command which will verify that the current set of sources in the VMR doesn't come from private repositories and then it will push a given branch into the VMR.
• The push it will replace is currently happening here, so have a look at the commands it runs as it should do the same thing.
• We should figure out a way how to tell the tooling which domains are fine and which are ok as it shouldn't be hardcoded.
  Example: dev.azure.com->github.com should be rejected (when any source comes from dev.azure.com, do not push to github.com)
  • Alternatively, the command could verify that all the commits exist in the public repos before pushing

Release Note Category

• Feature changes/additions
• Bug fixes
• Internal Infrastructure Improvements

Release Note Description

Added a darc vmr push command validating that all commits come from public repos before pushing to the VMR