.vsts-ci.yml

variables:
- name: TeamName
  value: DotNetCore
- template: /eng/common/templates-official/variables/pool-providers.yml@self

# CI and PR triggers
trigger:
  batch: true
  branches:
    include:
    - main

pr:
  autoCancel: false
  branches:
    include:
    - '*'

resources:
  repositories:
  - repository: 1ESPipelineTemplates
    type: git
    name: 1ESPipelineTemplates/1ESPipelineTemplates
    ref: refs/tags/release
extends:
  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
  parameters:
    sdl:
      policheck:
        enabled: true
      tsa:
        enabled: true
      binskim:
        analyzeTargetGlob: $(Build.SourcesDirectory)/artifacts/bin/**.dll;$(Build.SourcesDirectory)/artifacts/bin/**.exe;
    pool:
      name: $(DncEngInternalBuildPool)
      image: 1es-windows-2022
      os: windows
    customBuildTags:
    - ES365AIMigrationTooling
    stages:
    - stage: build
      displayName: Build
      jobs:
      - template: /eng/common/templates-official/jobs/jobs.yml@self
        parameters:
          enableMicrobuild: true
          enableMicrobuildForMacAndLinux: true
          enablePublishUsingPipelines: true
          enablePublishBuildArtifacts: true
          enablePublishTestResults: false
          enableTelemetry: true
          helixRepo: dotnet/cli-lab
          timeoutInMinutes: 180 # increase timeout since BAR publishing might wait a long time
          jobs:
          - job: Windows
            pool:
              # For public or PR jobs, use the hosted pool.  For internal jobs use the internal pool.
              # Will eventually change this to two BYOC pools.
              ${{ if ne(variables['System.TeamProject'], 'internal') }}:
                name: $(DncEngPublicBuildPool)
                image: 1es-windows-2022-open
                os: windows
              ${{ if eq(variables['System.TeamProject'], 'internal') }}:
                name: $(DncEngInternalBuildPool)
                image: 1es-windows-2022
                os: windows
            variables:
            - name: _RID
              value: win-x86
            - name: _BuildConfig
              value: Release
            - ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
              - name: _SignType
                value: test
              - name: _DotNetPublishToBlobFeed
                value: false
              - name: _BuildArgs
                value: ''
            - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
              - name: _SignType
                value: real
              - name: _DotNetPublishToBlobFeed
                value: false
              - name: _BuildArgs
                value: $(_OfficialBuildArgs)
            # Only enable publishing in official builds.
            - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
              # Publish-Build-Assets provides: MaestroAccessToken, BotAccount-dotnet-maestro-bot-PAT
              - group: Publish-Build-Assets
              - name: _OfficialBuildArgs
                value: /p:DotNetSignType=$(_SignType)
                      /p:SignCoreDotnetCoreUninstall=true
                      /p:TeamName=$(TeamName)
                      /p:OfficialBuildId=$(BUILD.BUILDNUMBER)
                      /p:DotNetPublishUsingPipelines=true
            # else
            - ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
              - name: _OfficialBuildArgs
                value: ''
            steps:
            - checkout: self
              clean: true
            - script: eng\common\cibuild.cmd
                -configuration $(_BuildConfig)
                -prepareMachine
                $(_BuildArgs)
                /p:RID=$(_RID)
              displayName: Build and Publish
            - task: CopyFiles@2
              condition: and(eq(variables['system.pullrequest.isfork'], false), eq(variables['_BuildConfig'], 'Release'))
              inputs:
                sourceFolder: 'artifacts/packages/$(_BuildConfig)/Shipping/'
                contents: '*.msi'
                targetFolder: '$(Build.ArtifactStagingDirectory)'
            - task: 1ES.PublishBuildArtifacts@1
              condition: and(eq(variables['system.pullrequest.isfork'], false), eq(variables['_BuildConfig'], 'Release'))
              inputs:
                PathtoPublish: '$(Build.ArtifactStagingDirectory)'
                ArtifactName: 'drop-windows'
                publishLocation: 'Container'
                parallel: true
          - job: OSX_latest
            displayName: 'Mac OS'
            pool:
              name: Azure Pipelines
              image: 'macOS-latest'
              os: macOS
            strategy:
              matrix:
                ARM64:
                  _RID: osx-arm64
                  _BuildConfig: Release
                  _SignType: real
                  _DotNetPublishToBlobFeed: false
                X64:
                  _RID: osx-x64
                  _BuildConfig: Release
                  _SignType: real
                  _DotNetPublishToBlobFeed: false
            steps:
            - checkout: self
              clean: true
            - script: eng/common/cibuild.sh
                -sign 
                --configuration $(_BuildConfig)
                --prepareMachine
                -p:RID=$(_RID) -p:DotNetSignType=real -p:TeamName=$(TeamName) -p:OfficialBuildId=$(Build.BuildNumber)
              displayName: Build
            - task: ArchiveFiles@2
              condition: and(eq(variables['system.pullrequest.isfork'], false), eq(variables['_BuildConfig'], 'Release'))
              inputs:
                rootFolderOrFile: 'artifacts/layout/dotnet-core-uninstall/'
                includeRootFolder: false
                archiveType: 'tar'
                tarCompression: 'gz'
                archiveFile: '$(Build.ArtifactStagingDirectory)/dotnet-core-uninstall.tar.gz'
                replaceExistingArchive: true
            - task: 1ES.PublishBuildArtifacts@1
              condition: and(eq(variables['system.pullrequest.isfork'], false), eq(variables['_BuildConfig'], 'Release'))
              inputs:
                PathtoPublish: '$(Build.ArtifactStagingDirectory)'
                ArtifactName: 'drop-$(_RID)'
                publishLocation: 'Container'
                parallel: true