From b8e5a79d27ad018f545dde766b52ca7c040d2279 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alexander=20K=C3=B6plinger?= <alex.koeplinger@outlook.com>
Date: Fri, 27 Mar 2026 00:11:41 +0100
Subject: [PATCH] Disable SBOM generation for published logs

Set sbomEnabled: false on the 1ES.PublishBuildArtifacts@1 task used
by publish-logs.yml so that SBOM generation is skipped for log
artifacts. Logs don't contain shippable components and don't need
an SBOM manifest.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 eng/common/core-templates/steps/publish-logs.yml            | 1 +
 .../templates-official/steps/publish-build-artifacts.yml    | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/eng/common/core-templates/steps/publish-logs.yml b/eng/common/core-templates/steps/publish-logs.yml
index a9ea99ba6aa..5b77623ca40 100644
--- a/eng/common/core-templates/steps/publish-logs.yml
+++ b/eng/common/core-templates/steps/publish-logs.yml
@@ -60,3 +60,4 @@ steps:
       artifactName: PostBuildLogs
       continueOnError: true
       condition: always()
+      sbomEnabled: false
diff --git a/eng/common/templates-official/steps/publish-build-artifacts.yml b/eng/common/templates-official/steps/publish-build-artifacts.yml
index fcf6637b2eb..d179aa5be45 100644
--- a/eng/common/templates-official/steps/publish-build-artifacts.yml
+++ b/eng/common/templates-official/steps/publish-build-artifacts.yml
@@ -28,6 +28,10 @@ parameters:
 - name: retryCountOnTaskFailure
   type: string
   default: 10
+
+- name: sbomEnabled
+  type: string
+  default: ''
   
 steps:
 - ${{ if ne(parameters.is1ESPipeline, true) }}:
@@ -44,3 +48,5 @@ steps:
       ArtifactName: ${{ parameters.artifactName }}
     ${{ if parameters.retryCountOnTaskFailure }}:
       retryCountOnTaskFailure: ${{ parameters.retryCountOnTaskFailure }}
+    ${{ if ne(parameters.sbomEnabled, '') }}:
+      sbomEnabled: ${{ parameters.sbomEnabled }}