Ensure Pip CG (Azure#37261)

* add auth-dev-feed to internal `build` step. This will have the effect of locking down the bits we build packages with

Author: scbedd

eng/pipelines/templates/jobs/ci.yml

@@ -71,6 +71,9 @@ jobs:
       image: $(LINUXVMIMAGE)
       os: linux
 
+    variables:
+      ComponentDetection.SourcePath: '$(Build.SourcesDirectory)/sdk/${{ parameters.ServiceDirectory }}'
+
     steps:
     - template: /eng/pipelines/templates/steps/build.yml
       parameters:
@@ -89,6 +92,9 @@ jobs:
       image: $(WINDOWSVMIMAGE)
       os: windows
 
+    variables:
+      ComponentDetection.SourcePath: '$(Build.SourcesDirectory)/sdk/${{ parameters.ServiceDirectory }}'
+
     steps:
     - template: /eng/pipelines/templates/steps/build.yml
       parameters:
@@ -107,6 +113,9 @@ jobs:
       vmImage: $(MACVMIMAGE)
       os: macOS
 
+    variables:
+      ComponentDetection.SourcePath: '$(Build.SourcesDirectory)/sdk/${{ parameters.ServiceDirectory }}'
+
     steps:
     - template: /eng/pipelines/templates/steps/build.yml
       parameters:
@@ -130,7 +139,7 @@ jobs:
       name: $(LINUXPOOL)
       image: $(LINUXVMIMAGE)
       os: linux
-    
+
     variables:
       ComponentDetection.SourcePath: '$(Build.SourcesDirectory)/sdk/${{ parameters.ServiceDirectory }}'
 

eng/pipelines/templates/steps/build-extended-artifacts.yml

@@ -29,6 +29,11 @@ steps:
     inputs:
       versionSpec: '3.11'
 
+  - ${{if eq(variables['System.TeamProject'], 'internal') }}:
+    - template: auth-dev-feed.yml
+      parameters:
+        DevFeedName: ${{ parameters.DevFeedName }}
+
   - template: /eng/common/pipelines/templates/steps/set-test-pipeline-version.yml
     parameters:
       PackageName: "azure-template"
@@ -52,11 +57,6 @@ steps:
     parameters:
       ServiceDirectory: ${{ parameters.ServiceDirectory }}
 
-  - ${{if eq(variables['System.TeamProject'], 'internal') }}:
-    - template: auth-dev-feed.yml
-      parameters:
-        DevFeedName: ${{ parameters.DevFeedName }}
-
   - task: PythonScript@0
     displayName: 'Generate Docs'
     condition: and(succeededOrFailed(), ${{parameters.BuildDocs}})

eng/pipelines/templates/steps/build-package-artifacts.yml

@@ -45,6 +45,11 @@ steps:
     displayName: 'Tag scheduled builds'
     condition: and(eq(variables['Build.SourceBranchName'], variables['DefaultBranch']), eq(variables['Build.Reason'],'Schedule'))
 
+  - ${{if eq(variables['System.TeamProject'], 'internal') }}:
+    - template: auth-dev-feed.yml
+      parameters:
+        DevFeedName: ${{ parameters.DevFeedName }}
+
   - template: /eng/pipelines/templates/steps/use-venv.yml
     parameters:
       VirtualEnvironmentName: "venv"