Skip to content

Commit c261799

Browse files
author
Andrew Omondi
committed
refactor pipeline to 1es
1 parent 531b995 commit c261799

File tree

3 files changed

+116
-105
lines changed

3 files changed

+116
-105
lines changed

‎.azure-pipelines/ci-build-production.yml‎

Lines changed: 47 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,54 @@
1-
# Typescript Typings V1 npm build and release pipeline
1+
# This Yaml Document has been converted by ESAI Yaml Pipeline Conversion Tool.
2+
# Please make sure to check all the converted content, it is your team's responsibility to make sure that the pipeline is still valid and functions as expected.
3+
# This pipeline will be extended to the OneESPT template
4+
# The pool section has been filled with placeholder values, replace the pool section with your hosted pool, os, and image name. If you are using a Linux image, you must specify an additional windows image for SDL: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/overview#how-to-specify-a-windows-pool-for-the-sdl-source-analysis-stage
25
name: $(BuildDefinitionName)_$(SourceBranchName)_$(Date:yyyyMMdd)$(Rev:.r)
3-
46
trigger:
57
branches:
68
include:
7-
- main
9+
- main
810
paths:
911
include:
10-
- microsoft-graph.d.ts
11-
12+
- microsoft-graph.d.ts
1213
pr: none
13-
14-
pool:
15-
vmImage: windows-latest
16-
17-
steps:
18-
19-
- checkout: self
20-
displayName: checkout main
21-
22-
- template: ./common-templates/security-pre-checks.yml
23-
- task: CopyFiles@2
24-
displayName: 'Copy Files to staging directory'
25-
inputs:
26-
SourceFolder: '$(System.DefaultWorkingDirectory)'
27-
Contents: |
28-
**/*
29-
!spec/**
30-
!.azure-pipelines/**
31-
!.github/**
32-
!.git/**
33-
!.vscode/**
34-
!typings-demo.gif
35-
TargetFolder: '$(Build.ArtifactStagingDirectory)'
36-
37-
- task: PublishBuildArtifacts@1
38-
displayName: 'Publish Artifact: drop'
39-
40-
- template: ./common-templates/security-post-checks.yml
14+
resources:
15+
repositories:
16+
- repository: 1ESPipelineTemplates
17+
type: git
18+
name: 1ESPipelineTemplates/1ESPipelineTemplates
19+
ref: refs/tags/release
20+
extends:
21+
template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
22+
parameters:
23+
pool:
24+
name: 1ESPT-Pool-Name-Placeholder
25+
image: windows-latest
26+
os: windows
27+
customBuildTags:
28+
- ES365AIMigrationTooling
29+
stages:
30+
- stage: stage
31+
jobs:
32+
- job: job
33+
templateContext:
34+
outputs:
35+
- output: pipelineArtifact
36+
displayName: 'Publish Artifact: drop'
37+
steps:
38+
- checkout: self
39+
displayName: checkout main
40+
- template: /.azure-pipelines/common-templates/security-pre-checks.yml@self
41+
- task: CopyFiles@2
42+
displayName: 'Copy Files to staging directory'
43+
inputs:
44+
SourceFolder: '$(System.DefaultWorkingDirectory)'
45+
Contents: |
46+
**/*
47+
!spec/**
48+
!.azure-pipelines/**
49+
!.github/**
50+
!.git/**
51+
!.vscode/**
52+
!typings-demo.gif
53+
TargetFolder: '$(Build.ArtifactStagingDirectory)'
54+
- template: /.azure-pipelines/common-templates/security-post-checks.yml@self

‎.azure-pipelines/common-templates/security-post-checks.yml‎

Lines changed: 50 additions & 52 deletions
Original file line numberDiff line numberDiff line change
@@ -1,53 +1,51 @@
1-
# Copyright (c) Microsoft Corporation. All rights reserved.
2-
# Licensed under the MIT License.
1+
# This Yaml Document has been converted by ESAI Yaml Pipeline Conversion Tool.
2+
# Please make sure to check all the converted content, it is your team's responsibility to make sure that the pipeline is still valid and functions as expected.
33
steps:
4-
- task: CodesignValidation@0
5-
6-
- task: SdtReport@1
7-
displayName: "Security Analysis Report"
8-
continueOnError: true
9-
condition: succeededOrFailed()
10-
inputs:
11-
AllTools: false
12-
APIScan: false
13-
BinSkim: false
14-
BinSkimBreakOn: "WarningAbove"
15-
CodesignValidation: false
16-
CodesignValidationBreakOn: "WarningAbove"
17-
CredScan: true
18-
FortifySCA: false
19-
FxCop: false
20-
ModernCop: false
21-
MSRD: false
22-
PoliCheck: true
23-
PoliCheckBreakOn: "Severity1"
24-
RoslynAnalyzers: false
25-
RoslynAnalyzersBreakOn: "WarningAbove"
26-
SDLNativeRules: false
27-
Semmle: false
28-
TSLint: false
29-
TSLintBreakOn: "WarningAbove"
30-
ToolLogsNotFoundAction: "Standard"
31-
32-
- task: PublishSecurityAnalysisLogs@3
33-
displayName: "Publish Security Analysis Logs"
34-
inputs:
35-
ArtifactName: "CodeAnalysisLogs"
36-
ArtifactType: "Container"
37-
AllTools: false
38-
AntiMalware: false
39-
APIScan: false
40-
BinSkim: false
41-
CodesignValidation: false
42-
CredScan: true
43-
FortifySCA: false
44-
FxCop: false
45-
ModernCop: true
46-
MSRD: false
47-
PoliCheck: true
48-
RoslynAnalyzers: false
49-
SDLNativeRules: false
50-
Semmle: false
51-
TSLint: true
52-
WebScout: false
53-
ToolLogsNotFoundAction: "Standard"
4+
- task: CodesignValidation@0
5+
- task: SdtReport@1
6+
displayName: "Security Analysis Report"
7+
continueOnError: true
8+
condition: succeededOrFailed()
9+
inputs:
10+
AllTools: false
11+
APIScan: false
12+
BinSkim: false
13+
BinSkimBreakOn: "WarningAbove"
14+
CodesignValidation: false
15+
CodesignValidationBreakOn: "WarningAbove"
16+
CredScan: true
17+
FortifySCA: false
18+
FxCop: false
19+
ModernCop: false
20+
MSRD: false
21+
PoliCheck: true
22+
PoliCheckBreakOn: "Severity1"
23+
RoslynAnalyzers: false
24+
RoslynAnalyzersBreakOn: "WarningAbove"
25+
SDLNativeRules: false
26+
Semmle: false
27+
TSLint: false
28+
TSLintBreakOn: "WarningAbove"
29+
ToolLogsNotFoundAction: "Standard"
30+
- task: PublishSecurityAnalysisLogs@3
31+
displayName: "Publish Security Analysis Logs"
32+
inputs:
33+
ArtifactName: "CodeAnalysisLogs"
34+
ArtifactType: "Container"
35+
AllTools: false
36+
AntiMalware: false
37+
APIScan: false
38+
BinSkim: false
39+
CodesignValidation: false
40+
CredScan: true
41+
FortifySCA: false
42+
FxCop: false
43+
ModernCop: true
44+
MSRD: false
45+
PoliCheck: true
46+
RoslynAnalyzers: false
47+
SDLNativeRules: false
48+
Semmle: false
49+
TSLint: true
50+
WebScout: false
51+
ToolLogsNotFoundAction: "Standard"

‎.azure-pipelines/common-templates/security-pre-checks.yml‎

Lines changed: 19 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,20 @@
1-
# Copyright (c) Microsoft Corporation. All rights reserved.
2-
# Licensed under the MIT License.
1+
# This Yaml Document has been converted by ESAI Yaml Pipeline Conversion Tool.
2+
# Please make sure to check all the converted content, it is your team's responsibility to make sure that the pipeline is still valid and functions as expected.
33
steps:
4-
- task: CredScan@2
5-
displayName: "Run CredScan"
6-
inputs:
7-
debugMode: false
8-
batchSize: 20
9-
toolMajorVersion: "V2"
10-
searchersFileType: "Skype"
11-
12-
- task: PoliCheck@1
13-
displayName: "Run PoliCheck"
14-
condition: and(succeeded(), eq(eq(variables['Build.SourceBranch'], 'refs/heads/main'), false))
15-
inputs:
16-
targetType: F
17-
SOMEnabled: true
18-
optionsFC: 0
19-
optionsXS: 0
20-
optionsHMENABLE: 0
21-
continueOnError: true
4+
- task: CredScan@2
5+
displayName: "Run CredScan"
6+
inputs:
7+
debugMode: false
8+
batchSize: 20
9+
toolMajorVersion: "V2"
10+
searchersFileType: "Skype"
11+
- task: PoliCheck@1
12+
displayName: "Run PoliCheck"
13+
condition: and(succeeded(), eq(eq(variables['Build.SourceBranch'], 'refs/heads/main'), false))
14+
inputs:
15+
targetType: F
16+
SOMEnabled: true
17+
optionsFC: 0
18+
optionsXS: 0
19+
optionsHMENABLE: 0
20+
continueOnError: true

0 commit comments

Comments
 (0)