Michael Simons

> @MichaelSimons should we close this issue? No.

The scope of https://github.com/dotnet/source-build/issues/4182 is not clear. What is tracking the removal of `ExcludeFromSourceBuild`? I don't see any other issue in https://github.com/dotnet/source-build/issues/2975 that would include this besides https://github.com/dotnet/source-build/issues/4182. I am...

It think it would be useful to provide some history and what has changed in this area... Prior to .NET 8.0, Windows containers were included in the multi-platform tags ([see...

> we'll need to wait until after the [Publish Manifest stage](https://github.com/dotnet/dotnet-docker/blob/41a2f2766ff71601aef369a7b7ddc2d9bacaaebc/eng/common/templates/jobs/publish.yml#L74-L88) If I follow, this implies signing would happen in the publish stage. You also mention: >verifying signatures does not...

I'm on board as well.

Is there a timeline on addressing this CodeQL item? I ask because .NET team is also getting flagged for this as azure-activedirectory-identitymodel-extensions-for-dotnet is included in it's source build graph.

> @MichaelSimons GitHub is flagging this file as having errors as the teams being flagged aren't visible, is that expected? That's because of the note I included in the PR...

Gentle ping @dotnet/roslyn-infrastructure. Can you please make the requested permission changes so that this PR can be merged? TIA > Repo admins, please grant @dotnet/product-construction and @dotnet/source-build write access. You...

> If I'm understanding your request correctly, I need to create a PR with similar changes in the dotnet-docker repo for each one of the images that won't be using...

> @dotnet/source-build-internal Could you take a look at the failures here? I suspect this is from updating the sdk source-build is using but not the previously source-built artifacts. I will...