mirror of
https://github.com/Microsoft/vscode
synced 2024-08-27 13:00:58 +00:00
e5515ac702
* extend 1es pipeline template * oops * fix template references * argh * hmm * hm * hm * use outputs for compilation artifact * this * use 1ES.PublishPipelineArtifact@1 instead of publish * more 1ES.PublishPipelineArtifact@1 adoption * provide windows pool for sdl sources * sdl * fix pools * fix macos * disable sbom for intermediate artifacts * use mariner linux * try inline tsa options * fix credscan * hm * sudo it * more suppressions * be explicit with SBOM build drop paths * fix indentation * fix file extensions * fix cli sbom build drop paths * fix more build * fix unzip cli * careful with _manifest in artifacts * do not close file * add logging * debug * use snapcraft container * remove size check * fix macos cli step * fix snap permissions * fix macos * better logs * fix snap * more cred scan suppressions * even more supressiong * alpine-arm64: try using x64 * Revert "alpine-arm64: try using x64" This reverts commitbf2003bf60. * test docker * I wonder * logs * hm * fix indentation * hm * hm * fix snap finds * remove auth * use hostArchitecture * snap: limit find * hm * sudo * Add validateToolOutput: None to the build pipeline * bring back sdl-scan * try all tools: true * use release * Update Azure Pipelines YAML file for Linux product build and test * hm * hm * same for win32 * hm * hm * Revert "hm" This reverts commit1b9dcae85b. * use branch * fix template file * fix template paths
70 lines
2.8 KiB
YAML
70 lines
2.8 KiB
YAML
parameters:
|
|
- name: VSCODE_CLI_ARTIFACTS
|
|
type: object
|
|
default: []
|
|
|
|
steps:
|
|
- task: AzureKeyVault@1
|
|
displayName: "Azure Key Vault: Get Secrets"
|
|
inputs:
|
|
azureSubscription: "vscode-builds-subscription"
|
|
KeyVaultName: vscode-build-secrets
|
|
SecretsFilter: "ESRP-PKI,esrp-aad-username,esrp-aad-password"
|
|
|
|
- task: UseDotNet@2
|
|
inputs:
|
|
version: 6.x
|
|
|
|
- task: EsrpClientTool@1
|
|
displayName: "Use ESRP client"
|
|
|
|
- ${{ each target in parameters.VSCODE_CLI_ARTIFACTS }}:
|
|
- task: DownloadPipelineArtifact@2
|
|
displayName: Download artifact
|
|
inputs:
|
|
artifact: ${{ target }}
|
|
path: $(Build.ArtifactStagingDirectory)/pkg/${{ target }}
|
|
|
|
- task: ExtractFiles@1
|
|
displayName: Extract artifact
|
|
inputs:
|
|
archiveFilePatterns: $(Build.ArtifactStagingDirectory)/pkg/${{ target }}/*.zip
|
|
destinationFolder: $(Build.ArtifactStagingDirectory)/sign/${{ target }}
|
|
|
|
- powershell: |
|
|
. build/azure-pipelines/win32/exec.ps1
|
|
$ErrorActionPreference = "Stop"
|
|
$EsrpClientTool = (gci -directory -filter EsrpClientTool_* $(Agent.RootDirectory)\_tasks | Select-Object -last 1).FullName
|
|
$EsrpCliZip = (gci -recurse -filter esrpcli.*.zip $EsrpClientTool | Select-Object -last 1).FullName
|
|
mkdir -p $(Agent.TempDirectory)\esrpcli
|
|
Expand-Archive -Path $EsrpCliZip -DestinationPath $(Agent.TempDirectory)\esrpcli
|
|
$EsrpCliDllPath = (gci -recurse -filter esrpcli.dll $(Agent.TempDirectory)\esrpcli | Select-Object -last 1).FullName
|
|
echo "##vso[task.setvariable variable=EsrpCliDllPath]$EsrpCliDllPath"
|
|
displayName: Find ESRP CLI
|
|
|
|
- powershell: node build\azure-pipelines\common\sign $env:EsrpCliDllPath sign-windows $(ESRP-PKI) $(esrp-aad-username) $(esrp-aad-password) $(Build.ArtifactStagingDirectory)/sign "*.exe"
|
|
displayName: Codesign
|
|
|
|
- ${{ each target in parameters.VSCODE_CLI_ARTIFACTS }}:
|
|
- powershell: |
|
|
$ASSET_ID = "${{ target }}".replace("unsigned_", "");
|
|
echo "##vso[task.setvariable variable=ASSET_ID]$ASSET_ID"
|
|
displayName: Set asset id variable
|
|
|
|
- task: ArchiveFiles@2
|
|
displayName: Archive signed files
|
|
inputs:
|
|
rootFolderOrFile: $(Build.ArtifactStagingDirectory)/sign/${{ target }}
|
|
includeRootFolder: false
|
|
archiveType: zip
|
|
archiveFile: $(Build.ArtifactStagingDirectory)/$(ASSET_ID).zip
|
|
|
|
- task: 1ES.PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: $(Build.ArtifactStagingDirectory)/$(ASSET_ID).zip
|
|
artifactName: $(ASSET_ID)
|
|
sbomBuildDropPath: $(Build.ArtifactStagingDirectory)/sign/${{ target }}
|
|
sbomPackageName: "VS Code Windows ${{ target }} CLI"
|
|
sbomPackageVersion: $(Build.SourceVersion)
|
|
displayName: Publish signed artifact with ID $(ASSET_ID)
|