Also making release-dev 1ES compliant

.azure-pipelines/release-dev.yml

@@ -3,9 +3,28 @@
 # To configure triggers, see https://github.com/microsoft/onnx-converters-private/wiki/ONNX-Script-release
 trigger: none
 
-pool:
-  vmImage: ubuntu-latest
 variables:
   CI: 'true'
-steps:
-- template: stages/_release-template-stage.yml
+
+resources:
+  repositories:
+  - repository: 1esPipelines
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+
+extends:
+  # The pipeline extends the 1ES PT which will inject different SDL and compliance tasks.
+  # For non-production pipelines, use "Unofficial" as defined below.
+  # For productions pipelines, use "Official".
+  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
+  parameters:
+    sdl:
+      sourceAnalysisPool:
+        name: onnxruntime-Win-CPU-2022
+        os: windows
+    pool:
+      name: 'onnxruntime-Ubuntu2204-AMD-CPU'
+      os: 'linux'
+    steps:
+    - template: stages/_release-template-stage.yml

.azure-pipelines/release.yml

@@ -13,6 +13,7 @@ resources:
     type: git
     name: 1ESPipelineTemplates/1ESPipelineTemplates
     ref: refs/tags/release
+
 extends:
   # The pipeline extends the 1ES PT which will inject different SDL and compliance tasks.
   # For non-production pipelines, use "Unofficial" as defined below.

.azure-pipelines/stages/_release-template-stage.yml

@@ -1,8 +1,3 @@
-parameters:
-- name: is1ES
-  displayName: 'Is 1ES pipeline'
-  type: boolean
-  default: false
 steps:
 - task: UsePythonVersion@0
   inputs:
@@ -18,14 +13,8 @@ steps:
     SourceFolder: 'dist'
     Contents: '*.*'
     TargetFolder: '$(Build.ArtifactStagingDirectory)'
-- ${{ if eq(parameters.is1ES, false) }}:
-  - task: PublishPipelineArtifact@1
-    displayName: 'Publish Python Wheel'
-    inputs:
-      ArtifactName: 'onnxscript'
-- ${{ if eq(parameters.is1ES, true) }}:
-  - task: 1ES.PublishPipelineArtifact@1
-    displayName: 'Publish Python Wheel'
-    inputs:
-      ArtifactName: 'onnxscript'
-      targetPath: '$(Build.ArtifactStagingDirectory)'
+- task: 1ES.PublishPipelineArtifact@1
+  displayName: 'Publish Python Wheel'
+  inputs:
+    ArtifactName: 'onnxscript'
+    targetPath: '$(Build.ArtifactStagingDirectory)'

.azure-pipelines/stages/release_stage.yml

@@ -4,8 +4,6 @@ stages:
   - job: Job
     steps:
     - template: _release-template-stage.yml
-      parameters:
-        is1ES: true
     # Test the wheels. This needs to happen after PublishBuildArtifacts
     # to avoid interference with the artifacts
     - script: python -m pip install dist/*.whl --no-deps