[release/v7.5] Add network isolation policy parameter to vPack pipeline #26393
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…26223) Co-authored-by: Copilot <[email protected]>
Contributor
There was a problem hiding this comment.
Pull Request Overview
This pull request adds network isolation policy configuration to the PowerShell vPack official build pipeline. The change introduces a new parameter that allows build queue time selection of network isolation policies, enabling more flexible network security configurations for the build environment.
- Added a new
netisoparameter with three predefined network isolation policy options (KS4, R1, Netlock) - Configured the Windows host to use version 2022 with the selected network isolation policy
- Exposed the network isolation setting through both parameters and variables for template consumption
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
SeeminglyScience
approved these changes
Nov 5, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Backport of #26223 to release/v7.5
Triggered by @TravisEz13 on behalf of @TravisEz13
Original CL Label: CL-BuildPackaging
/cc @PowerShell/powershell-maintainers
Impact
Tooling Impact
This change adds the network isolation policy parameter to the vPack pipeline, ensuring compliance requirements are met during the packaging process. This is required for proper package signing and validation.
Regression
This is not a regression fix, but an enhancement to the build infrastructure to meet compliance requirements.
Testing
This change was tested in the original PR through CI pipeline execution. The backport maintains the same changes without modification, so the same testing approach applies.
Risk
Medium risk: This changes build infrastructure (vPack pipeline configuration). While the change itself is straightforward (adding a parameter), build infrastructure changes require careful validation. The parameter addition ensures proper network isolation during packaging which is important for security and compliance. Not taking this change would create technical debt for future CI/CD updates that depend on this parameter being available.