Question

Your organization maintains a centralized set of reusable Azure Pipelines YAML step templates in a separate Git repository named 'pipeline-templates'. A new microservice repository needs to reference these templates in its own pipeline. The security team requires that the exact template repository and version be pinned so that unreviewed changes to the shared templates cannot silently alter build behavior in consuming pipelines. What should you configure in the consuming pipeline's YAML?

Accepted Answer

Declare a 'resources.repositories' entry for the template repo with a specific 'ref' (tag), then reference templates using the '<repo-alias>' syntax such as 'template: build.yml@templates'.

Answer

Copy the template files into the microservice repository at build time using a script step so they are always available locally.

Answer

Reference the templates by their raw HTTPS URL from the shared repository inside the 'template' keyword.

Answer

Add the shared repository as a Git submodule and enable 'checkout: submodules' so the templates are pulled during the checkout phase.