metadata-tools/azure-pipelines.yml at main · dotnet/metadata-tools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
trigger:
  batch: true
  branches:
    include:
    - main

# Run official build every day at midnight, if code has changed since the last run.
schedules:
- cron: "0 0 * * *"
  displayName: Daily Official Build
  branches:
    include:
    - main
- cron: "0 8 22-28 * 0" # Fourth Sunday of each month at 8:00 UTC.
  displayName: "Monthly build check"
  branches:
    include:
    - main
  always: true # Run even if there have been no source code changes since the last successful scheduled run
  batch: false # Do not run the pipeline if the previously scheduled run is in-progress

variables:
  - template: /eng/common/templates-official/variables/pool-providers.yml@self
  - name: TeamName
    value: Roslyn

resources:
  repositories:
  - repository: MicroBuildTemplate
    type: git
    name: 1ESPipelineTemplates/MicroBuildTemplate
    ref: refs/tags/release

extends:
  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
  parameters:
    sdl:
      sourceAnalysisPool:
        name: $(DncEngInternalBuildPool)
        image: 1es-windows-2022
        os: windows
      tsa:
        enabled: true
        configFile: '$(Build.SourcesDirectory)/eng/tsaconfig.gdntsa'
    pool:
      name: AzurePipelines-EO
      image: AzurePipelinesWindows2022compliantGPT
      os: windows
    customBuildTags:
    - ES365AIMigrationTooling
    stages:
    - stage: build
      displayName: Build
      jobs:
      - template: /eng/common/templates-official/jobs/jobs.yml@self
        parameters:
          enableMicrobuild: true
          enablePublishBuildArtifacts: true
          enablePublishTestResults: true
          enablePublishBuildAssets: true
          enablePublishUsingPipelines: true
          enableTelemetry: true
          enableSourceBuild: true
          helixRepo: dotnet/metadata-tools
          jobs:
          - job: Windows
            pool:
              ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
                vmImage: 'windows-latest'
              ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
                name: $(DncEngInternalBuildPool)
                demands: ImageOverride -equals 1es-windows-2022
            variables:
            # Only enable publishing in official builds
            - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
            # Publish-Build-Assets provides: MaestroAccessToken, BotAccount-dotnet-maestro-bot-PAT
              - group: Publish-Build-Assets
              - name: _OfficialBuildArgs
                value: /p:DotNetSignType=$(_SignType)
                       /p:TeamName=$(TeamName)
                       /p:DotNetPublishUsingPipelines=true
                       /p:OfficialBuildId=$(BUILD.BUILDNUMBER)
                 # else
            - ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
              - name: _OfficialBuildArgs
                value: ''
            strategy:
              matrix:
                ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
                  Debug:
                    _BuildConfig: Debug
                    _SignType: test
                    _BuildArgs: ''
                Release:
                  _BuildConfig: Release
                  # PRs or external builds are not signed.
                  ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
                    _SignType: test
                    _BuildArgs: ''
                  ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
                    _SignType: real
                    _BuildArgs: $(_OfficialBuildArgs)
            steps:
            - checkout: self
              clean: true
            - script: eng\common\cibuild.cmd -configuration $(_BuildConfig) -prepareMachine $(_BuildArgs)
              displayName: Build and Test

          - ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
            - job: MacOS
              displayName: 'MacOS'
              pool:
                vmImage: 'macOS-latest'
              strategy:
                matrix:
                  Debug:
                    _BuildConfig: Debug
                    _SignType: none
                  Release:
                    _BuildConfig: Release
                    _SignType: none
              steps:
              - checkout: self
                clean: true
              - script: eng/common/cibuild.sh --configuration $(_BuildConfig) --prepareMachine
                displayName: Build and Test

            - job: Linux
              displayName: 'Linux'
              pool:
                vmImage: 'ubuntu-latest'
              strategy:
                matrix:
                  Debug:
                    _BuildConfig: Debug
                    _SignType: none
                  Release:
                    _BuildConfig: Release
                    _SignType: none
              steps:
              - checkout: self
                clean: true
              - script: eng/common/cibuild.sh --configuration $(_BuildConfig) --prepareMachine
                displayName: Build and Test


    - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
      - template: /eng/common/templates-official/post-build/post-build.yml@self
        parameters:
          publishingInfraVersion: 3
          enableSymbolValidation: false