chore: use xray for verifying package (#2944)

Co-authored-by: Noel Stephens <[email protected]>

Author: miniwolf

.yamato/project-pack.yml

@@ -10,10 +10,13 @@ pack_{{ project.name }}:
   commands:
     - npm install upm-ci-utils@stable -g --registry https://artifactory.prd.cds.internal.unity3d.com/artifactory/api/npm/upm-npm
     - upm-ci project pack --project-path {{ project.path }}
+    - upm-pvp xray --packages "upm-ci~/packages/*.tgz" --results upm-ci~/xray
+    - upm-pvp require "$XRAY_PROFILE" --allow-missing --results upm-ci~/xray --exemptions upm-ci~/xray/new-exemptions.json || true
+    - upm-pvp require "$XRAY_PROFILE ./pvp-exemptions.json" --results upm-ci~/xray
   artifacts:
     packages:
       paths:
-        - "upm-ci~/packages/**/*"
+        - "upm-ci~/**"
 {% endfor -%}
 
 # Pack minimal project with different versions of dependencies
@@ -35,10 +38,13 @@ pack_{{ project.name }}_{{ dependency.name }}@{{ dependency.version }}:
     - unity-config settings project-path {{ project.path }}
     - unity-config project add dependency {{ dependency.name }}@{{ dependency.version }}
     - upm-ci project pack --project-path {{ project.path }}
+    - upm-pvp xray --packages "upm-ci~/packages/*.tgz" --results upm-ci~/xray
+    - upm-pvp require "$XRAY_PROFILE" --allow-missing --results upm-ci~/xray --exemptions upm-ci~/xray/new-exemptions.json || true
+    - upm-pvp require "$XRAY_PROFILE ./pvp-exemptions.json" --results upm-ci~/xray
   artifacts:
     packages:
       paths:
-        - "upm-ci~/packages/**/*"
+        - "upm-ci~/**"
 {% endfor -%}
 {% endif -%}
 {% endfor -%}