1
1
steps :
2
2
3
- # TODO: Replace build artifacts with pipeline artifacts
4
- - task : DownloadBuildArtifacts@0
5
- displayName : Download build artifacts
6
- inputs :
7
- downloadType : specific
8
-
9
- - task : ExtractFiles@1
10
- displayName : Unzip build artifacts
11
- inputs :
12
- archiveFilePatterns : $(Build.ArtifactStagingDirectory)/PowerShellEditorServices-CI/PowerShellEditorServices*.zip
13
- destinationFolder : $(Build.ArtifactStagingDirectory)/Unsigned
3
+ - download : current
4
+ artifact : PowerShellEditorServices-Build
5
+ displayName : Download unsigned pipeline artifacts
14
6
15
7
- checkout : ComplianceRepo
16
8
17
9
# NOTE: The signing templates explicitly copy everything along as they run, so
18
10
# the last output path has every signed (and intentionally unsigned) file.
19
11
- template : EsrpSign.yml@ComplianceRepo
20
12
parameters :
21
- buildOutputPath : $(Build.ArtifactStagingDirectory)/Unsigned
22
- signOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
13
+ buildOutputPath : $(Pipeline.Workspace)/PowerShellEditorServices-Build
14
+ signOutputPath : $(Pipeline.Workspace )/FirstPartySigned
23
15
alwaysCopy : true
24
16
certificateId : CP-230012 # Authenticode certificate
25
17
shouldSign : true # We always want to sign
37
29
38
30
- template : EsrpSign.yml@ComplianceRepo
39
31
parameters :
40
- buildOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
41
- signOutputPath : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
32
+ buildOutputPath : $(Pipeline.Workspace )/FirstPartySigned
33
+ signOutputPath : $(Pipeline.Workspace )/ThirdPartySigned
42
34
alwaysCopy : true
43
35
certificateId : CP-231522 # Third-party certificate
44
36
shouldSign : true # We always want to sign
@@ -54,14 +46,14 @@ steps:
54
46
- task : ArchiveFiles@2
55
47
displayName : Zip finished assets
56
48
inputs :
57
- rootFolderOrFile : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
49
+ rootFolderOrFile : $(Pipeline.Workspace )/ThirdPartySigned
58
50
includeRootFolder : false
59
51
archiveType : zip
60
- archiveFile : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
52
+ archiveFile : PowerShellEditorServices.zip
61
53
replaceExistingArchive : true
62
54
verbose : true
63
55
64
- - publish : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
56
+ - publish : PowerShellEditorServices.zip
65
57
artifact : PowerShellEditorServices
66
58
displayName : Publish signed pipeline artifacts
67
59
@@ -70,18 +62,18 @@ steps:
70
62
- template : assembly-module-compliance.yml@ComplianceRepo
71
63
parameters :
72
64
# binskim
73
- AnalyzeTarget : ' $(Build.ArtifactStagingDirectory )/*.dll'
65
+ AnalyzeTarget : $(Pipeline.Workspace )/*.dll
74
66
AnalyzeSymPath : ' SRV*'
75
67
# component-governance
76
- sourceScanPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
68
+ sourceScanPath : $(Build.SourcesDirectory)/PowerShellEditorServices
77
69
# credscan
78
70
suppressionsFile : ' '
79
71
# TermCheck AKA PoliCheck
80
- targetArgument : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
81
- optionsUEPATH : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml'
72
+ targetArgument : $(Build.SourcesDirectory)/PowerShellEditorServices
73
+ optionsUEPATH : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml
82
74
optionsRulesDBPath : ' '
83
- optionsFTPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml'
75
+ optionsFTPath : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml
84
76
# tsa-upload
85
- codeBaseName : ' PowerShell_PowerShellEditorServices_20210201'
77
+ codeBaseName : PowerShell_PowerShellEditorServices_20210201
86
78
# selections
87
79
APIScan : false
0 commit comments