1- trigger :
2- batch : true
3- branches :
4- include :
5- - main
6- - ' v*'
7- - ' validate/*'
8- paths :
9- exclude :
10- - doc/
11- - ' *.md'
12- - .vscode/
13- - azure-pipelines/release.yml
14- - azure-pipelines/vs-insertion.yml
15- # Disable automatic real-signed builds and insertions
16- # because we mostly just maintain the repo compliance and freshness without making any shipping changes.
1+ trigger : none # We only want to trigger manually or based on a schedule
2+ pr : none
173# schedules:
184# - cron: "0 3 * * *" # Daily @ 8 PM PST
195# displayName: Daily vs-insertion
@@ -27,10 +13,6 @@ parameters:
2713# As an entrypoint pipeline yml file, all parameters here show up in the Queue Run dialog.
2814# If any paramaters should NOT be queue-time options, they should be removed from here
2915# and references to them in this file replaced with hard-coded values.
30- - name : ForceOfficialBuild
31- displayName : Official build (sign, compliance, etc.)
32- type : boolean
33- default : false # this should remain false so PR builds using this pipeline are unofficial
3416# - name: ShouldSkipOptimize # Uncomment this and references to it below when setting EnableOptProf to true in build.yml.
3517# displayName: Skip OptProf optimization
3618# type: boolean
@@ -59,75 +41,44 @@ variables:
5941- template : GlobalVariables.yml
6042
6143extends :
62- ${{ if or(parameters.ForceOfficialBuild, eq(variables['Build.Reason'],'Schedule')) }} :
63- template : azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
64- parameters :
65- sdl :
66- sourceAnalysisPool : VSEngSS-MicroBuild2022-1ES
67- codeSignValidation :
68- enabled : true
69- break : true
70- additionalTargetsGlobPattern : -|Variables-*\*.ps1;-|APIScanInputs-*\**;-|test_symbols-*\**;-|MicroBuild\**
71- policheck :
72- enabled : true
73- exclusionsFile : $(System.DefaultWorkingDirectory)\azure-pipelines\PoliCheckExclusions.xml
74- suppression :
75- suppressionFile : $(System.DefaultWorkingDirectory)\azure-pipelines\falsepositives.gdnsuppress
76- sbom :
77- enabled : true
78- stages :
79- - stage : Build
80- variables :
81- - template : /azure-pipelines/BuildStageVariables.yml@self
82- jobs :
83- - template : /azure-pipelines/build.yml@self
84- parameters :
85- Is1ESPT : true
86- RealSign : true
87- # ShouldSkipOptimize: ${{ parameters.ShouldSkipOptimize }}
88- EnableAPIScan : ${{ and(parameters.EnableAPIScan, ne(variables['Build.Reason'], 'pullRequest')) }}
89- windowsPool : VSEngSS-MicroBuild2022-1ES
90- linuxPool :
91- name : AzurePipelines-EO
92- demands :
93- - ImageOverride -equals 1ESPT-Ubuntu22.04
94- os : Linux
95- macOSPool :
96- name : Azure Pipelines
97- vmImage : macOS-14
98- os : macOS
99- EnableMacOSBuild : ${{ parameters.EnableMacOSBuild }}
100- RunTests : ${{ parameters.RunTests }}
101- - template : /azure-pipelines/prepare-insertion-stages.yml@self
44+ template : azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
45+ parameters :
46+ sdl :
47+ sourceAnalysisPool : VSEngSS-MicroBuild2022-1ES
48+ codeSignValidation :
49+ enabled : true
50+ break : true
51+ additionalTargetsGlobPattern : -|Variables-*\*.ps1;-|APIScanInputs-*\**;-|test_symbols-*\**;-|MicroBuild\**
52+ policheck :
53+ enabled : true
54+ exclusionsFile : $(System.DefaultWorkingDirectory)\azure-pipelines\PoliCheckExclusions.xml
55+ suppression :
56+ suppressionFile : $(System.DefaultWorkingDirectory)\azure-pipelines\falsepositives.gdnsuppress
57+ sbom :
58+ enabled : true
59+ stages :
60+ - stage : Build
61+ variables :
62+ - template : /azure-pipelines/BuildStageVariables.yml@self
63+ jobs :
64+ - template : /azure-pipelines/build.yml@self
10265 parameters :
66+ Is1ESPT : true
10367 RealSign : true
104- ${{ else }} :
105- template : azure-pipelines/MicroBuild.1ES.Unofficial.yml@MicroBuildTemplate
106- parameters :
107- sdl :
108- sourceAnalysisPool : VSEngSS-MicroBuild2022-1ES
109- suppression :
110- suppressionFile : $(System.DefaultWorkingDirectory)\azure-pipelines\falsepositives.gdnsuppress
111- stages :
112- - stage : Build
113- variables :
114- - template : /azure-pipelines/BuildStageVariables.yml@self
115- jobs :
116- - template : /azure-pipelines/build.yml@self
117- parameters :
118- Is1ESPT : true
119- RealSign : false
120- # ShouldSkipOptimize: ${{ parameters.ShouldSkipOptimize }}
121- EnableAPIScan : false
122- windowsPool : VSEngSS-MicroBuild2022-1ES
123- linuxPool :
124- name : AzurePipelines-EO
125- demands :
126- - ImageOverride -equals 1ESPT-Ubuntu22.04
127- os : Linux
128- macOSPool :
129- name : Azure Pipelines
130- vmImage : macOS-14
131- os : macOS
132- EnableMacOSBuild : ${{ parameters.EnableMacOSBuild }}
133- RunTests : ${{ parameters.RunTests }}
68+ # ShouldSkipOptimize: ${{ parameters.ShouldSkipOptimize }}
69+ EnableAPIScan : ${{ parameters.EnableAPIScan }}
70+ windowsPool : VSEngSS-MicroBuild2022-1ES
71+ linuxPool :
72+ name : AzurePipelines-EO
73+ demands :
74+ - ImageOverride -equals 1ESPT-Ubuntu22.04
75+ os : Linux
76+ macOSPool :
77+ name : Azure Pipelines
78+ vmImage : macOS-14
79+ os : macOS
80+ EnableMacOSBuild : ${{ parameters.EnableMacOSBuild }}
81+ RunTests : ${{ parameters.RunTests }}
82+ - template : /azure-pipelines/prepare-insertion-stages.yml@self
83+ parameters :
84+ RealSign : true
0 commit comments