KEMBAR78
Ensure all vcpkgs use our custom triplets by florelis · Pull Request #5423 · microsoft/winget-cli · GitHub
Skip to content

Conversation

florelis
Copy link
Member

@florelis florelis commented May 1, 2025

After the change to have our dependencies use vcpkgs instead of checking in a clone of the code, we got BinSkim alerts due to some of them not using our custom triplets with the compilation flags that we need. This PR ensures that all projects include the vcpkg.props that makes CMake use our custom triplets instead of the default {arch}-windows ones.

It is unclear to me why this happened. For example, why the test installer exe was building the vcpkgs at all, but the logs show that as one of the root projects for the issue.

Besides importing vcpkg.props in more projects, this also does a little refactor of the triplets to reduce duplication and have the required flags in a single place

Microsoft Reviewers: Open in CodeFlow

@florelis florelis requested a review from a team as a code owner May 1, 2025 21:37
@florelis florelis merged commit 9557d36 into master May 2, 2025
13 checks passed
@florelis florelis deleted the vcpkg-flags branch May 2, 2025 17:01
florelis added a commit that referenced this pull request May 3, 2025
In #5423 I used a wrong variable for the arm64-release-static vcpkg
triplet. Didn't notice it until running on internal builds because we
don't build that configuration in CI builds here...
###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/5431)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants