azure-pipelines-official.yml

resources:
  repositories:
  - repository: MicroBuildTemplate
    type: git
    name: 1ESPipelineTemplates/MicroBuildTemplate
    ref: refs/tags/release

# Branches that trigger a build on commit
trigger:
- main
- release/*
- internal/release/*
variables:
- group: AzureDevOps-Artifact-Feeds-Pats
extends:
  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
  parameters:
    sdl:
      sourceAnalysisPool:
        name: NetCore1ESPool-Svc-Internal
        image: 1es-windows-2022
        os: windows
    pool:
      name: netcore1espool-internal
      image: windows.vs2022preview.amd64
      os: windows
    customBuildTags:
    - ES365AIMigrationTooling
    stages:
    - stage: build
      displayName: Build and Test
      pool:
        name: NetCore1ESPool-Svc-Internal
        demands: ImageOverride -equals windows.vs2022preview.amd64
      jobs:
      - job: OfficialBuild
        displayName: Official Build
        templateContext:
          mb:
            signing:
              enabled: true
              feedSource: https://dnceng.pkgs.visualstudio.com/_packaging/MicroBuildToolset/nuget/v3/index.json
              signType: $(SignType)
          outputs:
          - output: pipelineArtifact
            displayName: 'Publish Logs'
            condition: not(succeeded())
            targetPath: '$(Build.SourcesDirectory)\artifacts\log\$(BuildConfiguration)'
            artifactName: 'Logs'
            publishLocation: Container
          - output: pipelineArtifact
            displayName: 'Publish Logs'
            condition: not(succeeded())
            targetPath: '$(Build.SourcesDirectory)\artifacts\TestResults\$(BuildConfiguration)'
            artifactName: 'TestResults'
            publishLocation: Container
          - output: buildArtifacts
            displayName: 'Publish Packages'
            condition: succeeded()
            PathtoPublish: '$(Build.SourcesDirectory)\artifacts\packages\$(BuildConfiguration)'
            ArtifactName: 'PackageArtifacts'
          - output: buildArtifacts
            displayName: 'Publish Asset Manifests'
            condition: succeeded()
            PathtoPublish: '$(Build.SourcesDirectory)/artifacts/log/$(BuildConfiguration)/AssetManifest'
            ArtifactName: AssetManifests
          - output: pipelineArtifact
            displayName: 'Publish MicroBuild Artifacts'
            condition: succeededOrFailed()
            targetPath: '$(Build.ArtifactStagingDirectory)\MicroBuild\Output'
            artifactName: MicroBuildOutputs
            publishLocation: Container
        steps:
        - task: PowerShell@2
          displayName: Setup Private Feeds Credentials
          inputs:
            filePath: $(Build.SourcesDirectory)/eng/common/SetupNugetSources.ps1
            arguments: -ConfigFile $(Build.SourcesDirectory)/NuGet.config -Password $Env:Token
          env:
            Token: $(dn-bot-dnceng-artifact-feeds-rw)
        - script: eng\common\CIBuild.cmd -configuration $(BuildConfiguration) /p:OfficialBuildId=$(Build.BuildNumber) /p:VisualStudioDropName=$(VisualStudioDropName) /p:DotNetSignType=$(SignType) /p:DotNetFinalVersionKind=$(_additionalBuildArgs) /p:DotnetPublishUsingPipelines=true
          displayName: Build
        - template: /eng/common/templates-official/steps/generate-sbom.yml@self
        - task: PublishTestResults@2
          displayName: Publish XUnit Test Results
          inputs:
            testRunner: XUnit
            testResultsFiles: '$(Build.SourcesDirectory)\artifacts\TestResults\$(BuildConfiguration)\*.trx'
            mergeTestResults: true
            testRunTitle: 'Unit Tests'
          condition: always()
      - job: codeql
        displayName: CodeQL
        variables:
        - name: skipComponentGovernanceDetection
          value: true
        - name: Codeql.Enabled
          value: true
        - name: Codeql.Cadence
          value: 0
        - name: Codeql.TSAEnabled
          value: true
        steps:
        - task: PowerShell@2
          displayName: Setup Private Feeds Credentials
          inputs:
            filePath: $(Build.SourcesDirectory)/eng/common/SetupNugetSources.ps1
            arguments: -ConfigFile $(Build.SourcesDirectory)/NuGet.config -Password $Env:Token
          env:
            Token: $(dn-bot-dnceng-artifact-feeds-rw)
        - script: eng\common\cibuild.cmd -configuration Release -prepareMachine /p:Test=false
          displayName: Windows Build
      - template: /eng/common/templates-official/jobs/source-build.yml@self
      - template: /eng/common/templates-official/job/publish-build-assets.yml@self
        parameters:
          publishUsingPipelines: true
          dependsOn:
          - OfficialBuild
          - Source_Build_Managed
    - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
      - template: /eng/common/templates-official/post-build/post-build.yml@self
        parameters:
          publishingInfraVersion: 3
          enableSymbolValidation: false
          enableSourceLinkValidation: false