1
1
steps :
2
2
3
- # TODO: Replace build artifacts with pipeline artifacts
4
- - task : DownloadBuildArtifacts@0
5
- displayName : Download build artifacts
6
- inputs :
7
- downloadType : specific
8
-
9
- - task : ExtractFiles@1
10
- displayName : Unzip build artifacts
11
- inputs :
12
- archiveFilePatterns : $(Build.ArtifactStagingDirectory)/PowerShellEditorServices-CI/PowerShellEditorServices*.zip
13
- destinationFolder : $(Build.ArtifactStagingDirectory)/Unsigned
3
+ - download : current
4
+ displayName : Download unsigned pipeline artifacts
14
5
15
6
- checkout : ComplianceRepo
16
7
17
8
# NOTE: The signing templates explicitly copy everything along as they run, so
18
9
# the last output path has every signed (and intentionally unsigned) file.
19
10
- template : EsrpSign.yml@ComplianceRepo
20
11
parameters :
21
- buildOutputPath : $(Build.ArtifactStagingDirectory)/Unsigned
22
- signOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
12
+ buildOutputPath : $(Pipeline.Workspace)/PowerShellEditorServices-Build-*
13
+ signOutputPath : $(Pipeline.Workspace )/FirstPartySigned
23
14
alwaysCopy : true
24
15
certificateId : CP-230012 # Authenticode certificate
25
16
shouldSign : true # We always want to sign
37
28
38
29
- template : EsrpSign.yml@ComplianceRepo
39
30
parameters :
40
- buildOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
41
- signOutputPath : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
31
+ buildOutputPath : $(Pipeline.Workspace )/FirstPartySigned
32
+ signOutputPath : $(Pipeline.Workspace )/ThirdPartySigned
42
33
alwaysCopy : true
43
34
certificateId : CP-231522 # Third-party certificate
44
35
shouldSign : true # We always want to sign
@@ -54,14 +45,14 @@ steps:
54
45
- task : ArchiveFiles@2
55
46
displayName : Zip finished assets
56
47
inputs :
57
- rootFolderOrFile : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
48
+ rootFolderOrFile : $(Pipeline.Workspace )/ThirdPartySigned
58
49
includeRootFolder : false
59
50
archiveType : zip
60
- archiveFile : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
51
+ archiveFile : PowerShellEditorServices.zip
61
52
replaceExistingArchive : true
62
53
verbose : true
63
54
64
- - publish : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
55
+ - publish : PowerShellEditorServices.zip
65
56
artifact : PowerShellEditorServices
66
57
displayName : Publish signed pipeline artifacts
67
58
@@ -70,18 +61,18 @@ steps:
70
61
- template : assembly-module-compliance.yml@ComplianceRepo
71
62
parameters :
72
63
# binskim
73
- AnalyzeTarget : ' $(Build.ArtifactStagingDirectory )/*.dll'
64
+ AnalyzeTarget : $(Pipeline.Workspace )/*.dll
74
65
AnalyzeSymPath : ' SRV*'
75
66
# component-governance
76
- sourceScanPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
67
+ sourceScanPath : $(Build.SourcesDirectory)/PowerShellEditorServices
77
68
# credscan
78
69
suppressionsFile : ' '
79
70
# TermCheck AKA PoliCheck
80
- targetArgument : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
81
- optionsUEPATH : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml'
71
+ targetArgument : $(Build.SourcesDirectory)/PowerShellEditorServices
72
+ optionsUEPATH : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml
82
73
optionsRulesDBPath : ' '
83
- optionsFTPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml'
74
+ optionsFTPath : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml
84
75
# tsa-upload
85
- codeBaseName : ' PowerShell_PowerShellEditorServices_20210201'
76
+ codeBaseName : PowerShell_PowerShellEditorServices_20210201
86
77
# selections
87
78
APIScan : false
0 commit comments