Skip to content

[acrcssc] Un-pin the cssc image version to let the latest cached image be picked by acr task infra automatically during task runs#9757

Open
Ruchii-27 wants to merge 1 commit intoAzure:mainfrom
AzureCR:unpinCsscImageVersion
Open

[acrcssc] Un-pin the cssc image version to let the latest cached image be picked by acr task infra automatically during task runs#9757
Ruchii-27 wants to merge 1 commit intoAzure:mainfrom
AzureCR:unpinCsscImageVersion

Conversation

@Ruchii-27
Copy link
Copy Markdown
Contributor

PR Description:

  • As of today, each cssc image update requires modifying the pinned image tag in the task definitions and releasing a new CLI extension version. By unpinning the version, patch updates to the cssc image can be rolled out independently without a CLI release cycle.
  • This also ensures the cached version of the cssc image is always used, resulting in faster task runs since the task infrastructure doesn't need to pull a specific (potentially uncached) image tag.

This checklist is used to make sure that common guidelines for a pull request are followed.

Related command

General Guidelines

  • Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
  • Have you run python scripts/ci/test_index.py -q locally? (pip install wheel==0.30.0 required)
  • My extension version conforms to the Extension version schema
image

For new extensions:

About Extension Publish

There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

Copilot AI review requested due to automatic review settings April 2, 2026 23:57
@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd bot commented Apr 2, 2026

️✔️Azure CLI Extensions Breaking Change Test
️✔️Non Breaking Changes

@yonzhan
Copy link
Copy Markdown
Collaborator

yonzhan commented Apr 2, 2026

Thank you for your contribution! We will review the pull request and get back to you soon.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 3, 2026

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the acrcssc Azure CLI extension to stop pinning a specific CSSC container image tag in the ACR Task YAML templates, so task runs can use the task infrastructure’s cached/latest CSSC image without requiring an extension release for each image patch.

Changes:

  • Bump extension version to 1.0.0b7 and add release notes.
  • Remove the pinned mcr.microsoft.com/acr/cssc:<tag> reference from multiple ACR Task YAML templates (including the dry-run template).

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
src/acrcssc/setup.py Version bump to 1.0.0b7.
src/acrcssc/HISTORY.rst Add changelog entry describing the unpin behavior.
src/acrcssc/azext_acrcssc/templates/tmp_dry_run_template.yaml Remove pinned CSSC image reference from template values.
src/acrcssc/azext_acrcssc/templates/task/cssc_trigger_workflow.yaml Remove pinned CSSC image reference from workflow trigger task template.
src/acrcssc/azext_acrcssc/templates/task/cssc_scan_image.yaml Remove pinned CSSC image reference from scan task template.
src/acrcssc/azext_acrcssc/templates/task/cssc_patch_image.yaml Remove pinned CSSC image reference from patch task template.

Copy link
Copy Markdown
Contributor

@cegraybl cegraybl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yonzhan yonzhan requested a review from necusjz April 3, 2026 01:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants