.vsts-ci.yml

# Copyright (C) Microsoft Corporation. All rights reserved.
# Licensed under the MIT license. See LICENSE.txt in the project root for license information.

trigger:
  batch: true
  branches:
    include:
    - main
  paths:
    exclude:
    - README.md
  tags:
    include:
    - "*"

pr: none

resources:
  repositories:
  - repository: MicroBuildTemplate
    type: git
    name: 1ESPipelineTemplates/MicroBuildTemplate
    ref: refs/tags/release

extends:
  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
  parameters:
    pool:
      name: VSEngSS-MicroBuild2022-1ES
    sdl:
      sourceAnalysisPool:
        name: AzurePipelines-EO
        image: 1ESPT-Windows2022
      policheck:
        enabled: true
      binskim:
        enabled: true
        scanOutputDirectoryOnly: true # BinSkim scans whole source tree but we only need to scan the output dir.
        analyzeTargetGlob: +:f|$(Build.ArtifactStagingDirectory)\out\**;-:f|$(Build.ArtifactStagingDirectory)\out\**\*.test.*
      tsa:
        enabled: true
        configFile: $(Build.SourcesDirectory)\.config\tsaoptions.json
        onboard: false

    stages:
      - stage: Build
        jobs:
          - job: Build
            templateContext:
              mb:
                signing:
                  enabled: true
                  signType: $(SignType)

            steps:
            - template: /pipelines/templates/build.yml@self
              parameters:
                  BuildConfiguration: $(BuildConfiguration)
                  BuildPlatform: $(BuildPlatform)
                  Sign: true
                  PublishArtifactTemplate: /pipelines/templates/1es-publish-task.yml@self