/
azure-pipelines.yml
125 lines (120 loc) · 3.98 KB
/
azure-pipelines.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
trigger:
batch: true
branches:
include:
- main
- release/6.0
- release/7.0
- release/8.0
paths:
include:
- '*'
exclude:
- .github/*
- Documentation/*
- Images/*
- CODE-OF-CONDUCT.md
- CONTRIBUTING.md
- LICENSE.TXT
- PATENTS.TXT
- README.md
- SECURITY.md
- THIRD-PARTY-NOTICES.TXT
pr: none
variables:
- template: /eng/common-variables.yml@self
- template: /eng/common/templates-official/variables/pool-providers.yml@self
resources:
containers:
- container: LinuxContainer
image: mcr.microsoft.com/dotnet-buildtools/prereqs:cbl-mariner-2.0-fpm
repositories:
- repository: 1ESPipelineTemplates
type: git
name: 1ESPipelineTemplates/1ESPipelineTemplates
ref: refs/tags/release
extends:
template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
parameters:
pool:
name: $(DncEngInternalBuildPool)
image: windows.vs2019.amd64
os: windows
stages:
- stage: build
displayName: Build
jobs:
- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest'), eq(variables['Build.SourceBranch'], 'refs/heads/main')) }}:
- template: /eng/common/templates-official/job/onelocbuild.yml@self
parameters:
MirrorRepo: arcade
LclSource: lclFilesFromPackage
LclPackageId: 'LCL-JUNO-PROD-ARCADE'
- template: /eng/common/templates-official/jobs/jobs.yml@self
parameters:
artifacts:
publish:
artifacts: true
logs: true
manifests: true
enableMicrobuild: true
enablePublishUsingPipelines: true
enableSourceIndex: true
enableSourceBuild: true
workspace:
clean: all
jobs:
- job: Windows_NT
timeoutInMinutes: 90
strategy:
matrix:
Build_Release:
_BuildConfig: Release
preSteps:
- checkout: self
fetchDepth: 0
clean: true
steps:
- script: eng\common\cibuild.cmd
-configuration $(_BuildConfig)
-prepareMachine
$(_InternalBuildArgs)
/p:Test=false
displayName: Windows Build / Publish
- stage: ValidateSdk
displayName: Validate Arcade SDK
dependsOn: build
jobs:
- template: /eng/validate-sdk.yml@self
parameters:
buildArgs: -configuration $(_BuildConfig)
-prepareMachine
$(_InternalBuildArgs)
/p:Test=false
- template: /eng/common/templates-official/post-build/post-build.yml@self
parameters:
publishingInfraVersion: 3
# signing validation will not run, even if the below value is 'true', if the 'PostBuildSign' variable is set to 'true'
enableSigningValidation: false
# Sourcelink validation isn't passing for Arcade due to some regressions. This should be
# enabled back once this issue is resolved: https://github.com/dotnet/arcade/issues/2912
enableSourceLinkValidation: false
publishDependsOn:
- Validate
- ValidateSdk
# This is to enable SDL runs part of Post-Build Validation Stage
SDLValidationParameters:
enable: true
publishGdn: true
continueOnError: false
params: ' -SourceToolsList @("policheck","credscan")
-TsaInstanceURL $(_TsaInstanceURL)
-TsaProjectName $(_TsaProjectName)
-TsaNotificationEmail $(_TsaNotificationEmail)
-TsaCodebaseAdmin $(_TsaCodebaseAdmin)
-TsaBugAreaPath $(_TsaBugAreaPath)
-TsaIterationPath $(_TsaIterationPath)
-TsaRepositoryName "Arcade"
-TsaCodebaseName "Arcade"
-TsaPublish $True
-PoliCheckAdditionalRunConfigParams @("UserExclusionPath < $(Build.SourcesDirectory)/eng/PoliCheckExclusions.xml")'