Remove OneBranchType parameter and use Official type only

[cheenamalhotra]

Description

Updates ADO pipelines to use hardcoded OneBranch Official templates instead of parameterized template selection to meet 1ES governance and PRC compliance requirements.

Modified files

• dotnet-sqlclient-signing-pipeline.yml
• akv-official-pipeline.yml

Why

The parameterized approach (OneBranch.${{ parameters.oneBranchType }}.CrossPlat.yml) cannot be statically verified by Production Readiness Check and violates the requirement that production pipelines must always use Official templates.

---

NOTE: If Non-Official pipelines are needed, they should be created as separate pipelines.

[Copilot]

Pull request overview

Updates the governed OneBranch pipeline usage to always extend the Official CrossPlat template (removing runtime-selectable template choice) to satisfy 1ES/PRC compliance requirements.

Changes:

• Removed the oneBranchType queue-time parameter from the affected pipelines.
• Hardcoded extends.template to v2/OneBranch.Official.CrossPlat.yml@templates.
• Simplified SDL configuration by removing conditional logic that only applied to non-official template selection.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
eng/pipelines/dotnet-sqlclient-signing-pipeline.yml	Removes oneBranchType parameter, hardcodes Official template, and deletes non-official-only APIScan override logic.
eng/pipelines/akv-official-pipeline.yml	Removes oneBranchType parameter, hardcodes Official template, and makes TSA always enabled (consistent with Official-only usage).

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.56%. Comparing base (a4ccd62) to head (ab2c497).

❗ There is a different number of reports uploaded between BASE (a4ccd62) and HEAD (ab2c497). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (a4ccd62)	HEAD (ab2c497)
addons	1	0

Additional details and impacted files

@@             Coverage Diff             @@
##             main    #3913       +/-   ##
===========================================
- Coverage   90.82%   67.56%   -23.27%     
===========================================
  Files           6      263      +257     
  Lines         316    66170    +65854     
===========================================
+ Hits          287    44705    +44418     
- Misses         29    21465    +21436     

Flag	Coverage Δ
addons	?
netcore	67.56% <ø> (?)
netfx	66.55% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[paulmedynski]

We definitely need NonOfficial versions of these pipelines. That is the only way we can run the pipelines from topic branches. Can you create them as part of this PR?

[benrr101]

This needs to address nonofficial template builds

[paulmedynski]

Agree with @benrr101 - Need decidcated NonOfficial pipelines added.

[paulmedynski]

Should we rename dotnet-sqlclient-signing-pipeline.yml to dotnet-sqlclient-official-pipeline.yml ?

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 7 comments.

[benrr101]

Looks to be good - can you link to passing test runs of these pipelines in ADO?

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 5 comments.

[mdaigle]

We'll need to backport to 6.1 and 6.0