Humanizer/azure-pipelines.yml at main · Humanizr/Humanizer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
trigger:
- main
- rel/*

pr:
- main
- rel/*

variables:
  BuildConfiguration: Release
  DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true

stages:
- stage: Build
  variables:
  - group: 'Report Generator License Key'

  jobs:
  - job: Build
    pool:
      vmImage: windows-latest

    steps:
    - task: UseDotNet@2
      displayName: 'Use .NET 8 SDK'
      inputs:
        version: 8.x

    - task: UseDotNet@2
      displayName: 'Use .NET 9 SDK'
      inputs:
        version: 9.x

    - task: UseDotNet@2
      displayName: 'Use .NET 10 SDK'
      inputs:
        includePreviewVersions: true
        version: 10.x

    - task: UseDotNet@2
      displayName: 'Use .NET 11 SDK'
      inputs:
        includePreviewVersions: true
        version: 11.x

    - task: DotNetCoreCLI@2
      inputs:
        command: custom
        custom: tool
        arguments: install --tool-path . nbgv
      displayName: Install NBGV tool

    - script: nbgv cloud -c -a
      displayName: Set Version

    - task: DotNetCoreCLI@2
      inputs:
        command: build
        projects: ./src/Humanizer/Humanizer.csproj
        arguments: -c $(BuildConfiguration) /t:PackNuSpecs /p:PackageOutputPath=$(Build.ArtifactStagingDirectory)/Packages
      displayName: Restore, Build, and Pack

    - pwsh: |
        $(Build.SourcesDirectory)/tests/verify-packages.ps1 `
          -PackageVersion '$(NBGV_NuGetPackageVersion)' `
          -PackagesDirectory '$(Build.ArtifactStagingDirectory)/Packages' `
          -IncludeWapProjSmokeTest
      displayName: Verify Package Structure and Dependencies
      failOnStderr: false

    - task: DotNetCoreCLI@2
      inputs:
        command: test
        projects: |
          tests/Humanizer.Tests/Humanizer.Tests.csproj
          tests/Humanizer.Analyzers.Tests/Humanizer.Analyzers.Tests.csproj
        arguments: -c $(BuildConfiguration) --coverage --xunit-info
      displayName: Run Tests

    # Generate code coverage report
    # https://danielpalme.github.io/ReportGenerator/
    - task: reportgenerator@5
      displayName: Generate Code Coverage Report
      inputs:
        reports: '$(Agent.TempDirectory)/**/*.cobertura.xml'
        targetdir: $(Build.ArtifactStagingDirectory)/coverageReports/
        reporttypes: HtmlInline_AzurePipelines_Dark;Cobertura;Badges
        license: '$(ReportGeneratorLicenseKey)'
        publishCodeCoverageResults: true

    - publish: $(Build.ArtifactStagingDirectory)/Packages
      displayName: Publish build packages
      artifact: BuildPackages


- stage: CodeSign
  dependsOn: Build
  condition: and(succeeded('Build'), not(eq(variables['build.reason'], 'PullRequest')))
  jobs:
  - job: CodeSign
    displayName: Code Signing
    pool:
      vmImage: windows-latest
    variables:
    - group: SignCLI Creds

    steps:

    # Retreive unsigned artifacts
    - download: current
      artifact: BuildPackages
      displayName: Download build artifacts

    - task: UseDotNet@2
      displayName: 'Use .NET 10 SDK'
      inputs:
        includePreviewVersions: true
        version: 10.x

    # Install the code signing tool
    - task: DotNetCoreCLI@2
      inputs:
        command: custom
        custom: tool
        arguments: install --tool-path . --prerelease sign
      displayName: Install SignTool tool

    - task: AzureCLI@2
      inputs:
        azureSubscription: 'AzureRM - Humanizr'
        scriptType: pscore
        scriptLocation: inlineScript
        inlineScript: |
          .\sign code azure-key-vault `
          "**/*.nupkg" `
          --base-directory "$(Pipeline.Workspace)\BuildPackages" `
          --publisher-name "Humanizer" `
          --description "Humanizer" `
          --description-url "https://github.com/Humanizr/Humanizer" `
          --azure-key-vault-certificate "$(SignKeyVaultCertificate)" `
          --azure-key-vault-url "$(SignKeyVaultUrl)"
      displayName: Sign packages

    # Publish the signed packages
    - publish: $(Pipeline.Workspace)/BuildPackages
      displayName: Publish Signed Packages
      artifact: SignedPackages