From 98814ddfd56d0473398334b3acd10b150faf585f Mon Sep 17 00:00:00 2001
From: Dmitry Gozman <dgozman@gmail.com>
Date: Tue, 3 Nov 2026 17:08:27 +0000
Subject: [PATCH] devops: add explicit checkout step to pipelines

---
 .azure-pipelines/publish.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.azure-pipelines/publish.yml b/.azure-pipelines/publish.yml
index c12c79c..035d621 100644
--- a/.azure-pipelines/publish.yml
+++ b/.azure-pipelines/publish.yml
@@ -34,6 +34,10 @@ extends:
             path: $(Build.ArtifactStagingDirectory)/esrp-build
             artifact: esrp-build
         steps:
+        - checkout: self
+          persistCredentials: false
+          displayName: "Checkout code"
+
         - bash: |
             if [[ ! "$CURRENT_BRANCH" =~ ^v[0-9]+\..* ]]; then
               echo "Can only publish from a release tag (v*)."