Merge pull request #645 from microsoftgraph/andrueasmtna/tests

security: pipeline compliance

Author: andrueastman

.azure-pipelines/ci-build-production.yml

@@ -1,40 +1,85 @@
-# Typescript Typings V1 npm build and release pipeline
+# This Yaml Document has been converted by ESAI Yaml Pipeline Conversion Tool.
+# Please make sure to check all the converted content, it is your team's responsibility to make sure that the pipeline is still valid and functions as expected.
+# This pipeline will be extended to the OneESPT template
+# The pool section has been filled with placeholder values, replace the pool section with your hosted pool, os, and image name. If you are using a Linux image, you must specify an additional windows image for SDL: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/overview#how-to-specify-a-windows-pool-for-the-sdl-source-analysis-stage
 name: $(BuildDefinitionName)_$(SourceBranchName)_$(Date:yyyyMMdd)$(Rev:.r)
-
 trigger:
   branches:
     include:
-      - main
+    - main
   paths:
     include:
-      - microsoft-graph.d.ts
-
+    - microsoft-graph.d.ts
 pr: none
+resources:
+  repositories:
+  - repository: 1ESPipelineTemplates
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  parameters:
+    pool:
+      name: Azure-Pipelines-1ESPT-ExDShared
+      image: windows-latest
+      os: windows
+    customBuildTags:
+    - ES365AIMigrationTooling
+    stages:
+    - stage: build
+      jobs:
+      - job: job
+        templateContext:
+          outputs:
+          - output: pipelineArtifact
+            displayName: 'Publish Artifact drop'
+            targetPath: '$(Build.ArtifactStagingDirectory)'
+            artifactName: build-drop
+        steps:
+        - checkout: self
+          displayName: checkout main
+        - task: CopyFiles@2
+          displayName: 'Copy Files to staging directory'
+          inputs:
+            SourceFolder: '$(System.DefaultWorkingDirectory)'
+            Contents: |
+              **/*
+              !spec/**
+              !.azure-pipelines/**
+              !.github/**
+              !.git/**
+              !.vscode/**
+              !typings-demo.gif
+            TargetFolder: '$(Build.ArtifactStagingDirectory)'
 
-pool:
-  vmImage: windows-latest
-
-steps:
-
-- checkout: self
-  displayName: checkout main
-
-- template: ./common-templates/security-pre-checks.yml
-- task: CopyFiles@2
-  displayName: 'Copy Files to staging directory'
-  inputs:
-    SourceFolder: '$(System.DefaultWorkingDirectory)'
-    Contents: |
-     **/*
-     !spec/**
-     !.azure-pipelines/**
-     !.github/**
-     !.git/**
-     !.vscode/**
-     !typings-demo.gif
-    TargetFolder: '$(Build.ArtifactStagingDirectory)'
-
-- task: PublishBuildArtifacts@1
-  displayName: 'Publish Artifact: drop'
 
-- template: ./common-templates/security-post-checks.yml
+    - stage: deploy
+      condition: and(contains(variables['build.sourceBranch'], 'refs/heads/main'), succeeded())
+      jobs:
+        - deployment: deploy_npm
+          pool:
+            name: Azure-Pipelines-1ESPT-ExDShared
+            os: windows
+            image: windows-latest
+          dependsOn: []
+          environment: msgraph-npm-org
+          strategy:
+            runOnce:
+              deploy:
+                steps:
+                - download: current
+                  artifact: build-drop
+                - task: EsrpRelease@5
+                  inputs:
+                    ConnectedServiceName: 'MsGraph-ESRP-Publisher-Service-Connection'
+                    Intent: 'PackageDistribution'
+                    ContentType: 'npm'
+                    ContentSource: 'Folder'
+                    FolderLocation: $(Pipeline.Workspace)/build-drop/
+                    WaitForReleaseCompletion: true
+                    Owners: '[email protected]'
+                    Approvers: '[email protected],[email protected],[email protected],[email protected]'
+                    ServiceEndpointUrl: 'https://api.esrp.microsoft.com'
+                    MainPublisher: 'ESRPRELPACMAN'
+                    DomainTenantId: 'cdc5aeea-15c5-4db6-b079-fcadd2505dc2'