Build & Publish V2 #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build & Publish V2 | |
| on: [workflow_dispatch] | |
| permissions: | |
| contents: read | |
| jobs: | |
| JobBuild: | |
| name: release | |
| runs-on: [self-hosted, "1ES.Pool=1es-vscode-aks-tools-pool"] | |
| # Expose step outputs as job outputs | |
| outputs: | |
| currentversion: ${{ steps.package_version.outputs.current-version }} | |
| changelog_reader_changes: ${{ steps.changelog_reader.outputs.changes }} | |
| permissions: | |
| actions: read | |
| contents: read | |
| deployments: read | |
| packages: none | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| disable-sudo: true | |
| disable-telemetry: true | |
| - name: Checkout | |
| uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 | |
| - name: Use Node.js | |
| uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 | |
| with: | |
| node-version: 20 | |
| # Run install dependencies | |
| - name: Install dependencies | |
| run: npm run install:all | |
| # Ensure project builds successfully before creating release | |
| - name: Build | |
| run: npm run webpack | |
| - name: Get current package version | |
| id: package_version | |
| uses: martinbeentjes/npm-get-version-action@3cf273023a0dda27efcd3164bdfb51908dd46a5b # v1.3.1 | |
| JobsPublish: | |
| name: publish | |
| runs-on: [self-hosted, "1ES.Pool=1es-vscode-aks-tools-pool"] | |
| needs: JobBuild | |
| permissions: | |
| actions: read | |
| contents: write | |
| deployments: read | |
| packages: none | |
| id-token: write | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| egress-policy: audit | |
| disable-sudo: true | |
| disable-telemetry: true | |
| # Checkout the code again for release | |
| - name: Checkout | |
| uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 | |
| - name: Use Node.js | |
| uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 | |
| with: | |
| node-version: 20 | |
| # Run install dependencies | |
| - name: Install dependencies | |
| run: npm run install:all | |
| #Build and package | |
| - name: Build | |
| run: npm run webpack | |
| - name: federated login | |
| uses: azure/login@v2 | |
| with: | |
| auth-type: IDENTITY | |
| client-id: ${{ secrets.AZURE_CLIENT_ID }} | |
| tenant-id: ${{ secrets.AZURE_TENANT_ID }} | |
| subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} | |
| - name: Publish packaged extension | |
| run: | | |
| npx vsce publish --azure-credential --packagePath *.vsix |