init.gradle

allprojects {
    def azfuncFeedUrl = 'https://pkgs.dev.azure.com/azfunc/public/_packaging/upstream-public/maven/v1'
    def azfuncFeedToken = System.getenv('AZURE_ARTIFACTS_ENV_ACCESS_TOKEN') ?: findProperty('vstsMavenAccessToken')
    repositories {
        maven {
            url azfuncFeedUrl
            if (azfuncFeedToken) {
                credentials {
                    username 'Azure DevOps Services'
                    password azfuncFeedToken
                }
            }
        }
    }
    // Keep only the Azure Artifacts feed (and MavenLocal); remove every other Maven repository so no
    // public repository can bypass the feed.
    afterEvaluate { proj ->
        def isNonFeedMaven = { repo ->
            repo instanceof MavenArtifactRepository &&
            repo.name != 'MavenLocal' &&
            !repo.url.toString().startsWith(azfuncFeedUrl)
        }
        proj.repositories.findAll(isNonFeedMaven).each { proj.repositories.remove(it) }
        proj.buildscript.repositories.findAll(isNonFeedMaven).each { proj.buildscript.repositories.remove(it) }
    }
}