Support entrypoint and command for service containers

[ericsciple]

Summary

Adds support for entrypoint and command properties on service containers in workflow YAML.

Feature flag:

• actions_service_container_command

Changes

• Updated both legacy (PipelineTemplateConverter) and new (WorkflowTemplateConverter) parsers to support entrypoint and command on service containers when the flag is on, and emit context.Error with source location when the flag is off
• Set existing ContainerInfo.EntryPoint and ContainerInfo.Command properties, which DockerCommandManager already uses for docker create

E2E Testing

Validated end-to-end using the following workflow:

Test workflow

services:
custom-nginx:
image: nginx:alpineports:
- 19080:80entrypoint: /bin/shcommand: >- -c "echo 'entrypoint-and-command-works' > /usr/share/nginx/html/proof.txt && nginx -g 'daemon off;'"steps:
- name: Verify entrypoint and commandrun: | RESULT=$(curl -sf http://localhost:19080/proof.txt) [ "$RESULT" = "entrypoint-and-command-works" ] && echo "SUCCESS" || exit 1

[ericsciple]

Matches descriptions from server copy

[ericsciple]

Sets existing properties, which DockerCommandManager already uses for docker create

[Copilot]

Pull request overview

Adds support for entrypoint and command on service containers in workflow YAML, gated behind the actions_service_container_command feature flag, and wires the parsed values through to container creation.

Changes:

• Extend both legacy (DTPipelines) and new (WorkflowParser) schemas/parsers to recognize services.<id>.entrypoint and services.<id>.command.
• Gate parsing/evaluation via actions_service_container_command (plus ACTIONS_SERVICE_CONTAINER_COMMAND env var fallback) and emit a validation error when disabled.
• Add/extend L0 coverage to validate parity between legacy and new evaluators (flag on/off cases).

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
src/Test/L0/Worker/PipelineTemplateEvaluatorWrapperL0.cs	Updates wrapper construction and adds tests for service container entrypoint/command with flag on/off.
src/Sdk/WorkflowParser/workflow-v1.0.json	Introduces service-container-mapping and allows entrypoint/command under services.
src/Sdk/WorkflowParser/WorkflowFeatures.cs	Adds AllowServiceContainerCommand feature switch to WorkflowParser feature set.
src/Sdk/WorkflowParser/JobContainer.cs	Adds Entrypoint and Command properties to WorkflowParser JobContainer.
src/Sdk/WorkflowParser/Conversion/WorkflowTemplateConverter.cs	Parses/gates entrypoint/command and sets them on the converted container model.
src/Sdk/WorkflowParser/Conversion/WorkflowTemplateConstants.cs	Adds constants for entrypoint and command keys.
src/Sdk/DTPipelines/workflow-v1.0.json	Introduces service-container-mapping for legacy schema and allows entrypoint/command under services.
src/Sdk/DTPipelines/Pipelines/ObjectTemplating/PipelineTemplateEvaluator.cs	Threads AllowServiceContainerCommand through service container evaluation.
src/Sdk/DTPipelines/Pipelines/ObjectTemplating/PipelineTemplateConverter.cs	Parses/gates entrypoint/command for legacy JobContainer conversion.
src/Sdk/DTPipelines/Pipelines/ObjectTemplating/PipelineTemplateConstants.cs	Adds constants for entrypoint and command keys in legacy pipeline templating.
src/Sdk/DTPipelines/Pipelines/JobContainer.cs	Adds Entrypoint and Command properties to legacy JobContainer.
src/Runner.Worker/PipelineTemplateEvaluatorWrapper.cs	Passes the flag into both evaluators and compares Entrypoint/Command for mismatch recording.
src/Runner.Worker/ExecutionContext.cs	Reads feature flag + env var and propagates it to evaluators/wrapper.
src/Runner.Worker/Container/ContainerInfo.cs	Maps parsed Entrypoint/Command into ContainerInfo for downstream container creation.
src/Runner.Common/Constants.cs	Adds actions_service_container_command feature flag constant.

Comments suppressed due to low confidence (1)

src/Runner.Worker/PipelineTemplateEvaluatorWrapper.cs:418

• These mismatch logs include the full Command value. command often contains long shell fragments and can include secrets; consider avoiding logging the raw command (or redact/limit it) to reduce the risk of leaking sensitive workflow content into diagnostic logs.

 if (!string.Equals(legacyResult.Command, newResult.Command, StringComparison.Ordinal))
{
_trace.Info($"CompareJobContainer mismatch - Command differs (legacy='{legacyResult.Command}', new='{newResult.Command}')");
return false;
}

[gordolara789-tech]

Exito

[gordolara789-tech]

Exit