Skip to content

Commit d585a14

Browse files
mthalmanmthalman
authored
Migrate to 1ES pipeline templates (#295)
1 parent 2b0bb93 commit d585a14

File tree

3 files changed

+279
-41
lines changed

3 files changed

+279
-41
lines changed

‎.vsts.pipelines/builds/ci-public.yml

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
trigger:
2+
batch: true
3+
branches:
4+
include:
5+
- main
6+
- release/*
7+
paths:
8+
exclude:
9+
- '*.md'
10+
11+
pr:
12+
branches:
13+
include:
14+
- main
15+
- release/*
16+
paths:
17+
exclude:
18+
- '*.md'
19+
20+
variables:
21+
- template: /eng/common/templates/variables/pool-providers.yml
22+
- name: Codeql.Enable
23+
value: true
24+
25+
stages:
26+
- stage: build
27+
displayName: Build
28+
jobs:
29+
- template: /eng/common/templates/jobs/jobs.yml
30+
parameters:
31+
enablePublishUsingPipelines: true
32+
enablePublishBuildAssets: true
33+
artifacts:
34+
publish:
35+
artifacts: true
36+
manifests: true
37+
jobs:
38+
- job: SourceBuild_Managed
39+
displayName: Source-Build (Managed)
40+
pool:
41+
name: $(DncEngPublicBuildPool)
42+
demands: ImageOverride -equals Build.Ubuntu.1804.Amd64.Open
43+
container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:centos-stream8'
44+
workspace:
45+
clean: all
46+
variables:
47+
- name: _BuildConfig
48+
value: Release
49+
steps:
50+
- checkout: self
51+
submodules: recursive
52+
- template: /eng/common/templates/steps/source-build.yml

‎.vsts.pipelines/builds/ci.yml

Lines changed: 58 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,6 @@ trigger:
77
paths:
88
exclude:
99
- '*.md'
10-
1110
pr:
1211
branches:
1312
include:
@@ -16,44 +15,62 @@ pr:
1615
paths:
1716
exclude:
1817
- '*.md'
19-
20-
stages:
21-
- stage: build
22-
displayName: Build
23-
jobs:
24-
- template: /eng/common/templates/jobs/jobs.yml
25-
parameters:
26-
enablePublishUsingPipelines: true
27-
enablePublishBuildAssets: true
28-
artifacts:
29-
publish:
30-
artifacts: true
31-
manifests: true
18+
variables:
19+
- template: /eng/common/templates-official/variables/pool-providers.yml
20+
- name: TeamName
21+
value: DotNetSourceBuild
22+
- name: Codeql.Enable
23+
value: true
24+
resources:
25+
repositories:
26+
- repository: MicroBuildTemplate
27+
type: git
28+
name: 1ESPipelineTemplates/MicroBuildTemplate
29+
ref: refs/tags/release
30+
extends:
31+
template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
32+
parameters:
33+
sdl:
34+
sourceAnalysisPool:
35+
name: $(DncEngInternalBuildPool)
36+
image: 1es-windows-2022-pt
37+
os: windows
38+
suppression:
39+
suppressionFile: $(Build.SourcesDirectory)\.vsts.pipelines\guardian\.gdnsuppress
40+
customBuildTags:
41+
- ES365AIMigrationTooling
42+
stages:
43+
- stage: build
44+
displayName: Build
3245
jobs:
33-
34-
- job: SourceBuild_Managed
35-
displayName: Source-Build (Managed)
36-
pool:
37-
${{ if eq(variables['System.TeamProject'], 'public') }}:
38-
name: NetCore-Svc-Public
39-
demands: ImageOverride -equals Build.Ubuntu.1804.Amd64.Open
40-
${{ if eq(variables['System.TeamProject'], 'internal') }}:
41-
name: NetCore1ESPool-Svc-Internal
42-
demands: ImageOverride -equals Build.Ubuntu.1804.Amd64
43-
container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:centos-7-3e800f1-20190501005343'
44-
workspace:
45-
clean: all
46-
variables:
47-
- name: _BuildConfig
48-
value: Release
49-
steps:
50-
- checkout: self
51-
submodules: true
52-
- template: /eng/common/templates/steps/source-build.yml
53-
54-
- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
55-
- template: /eng/common/templates/post-build/post-build.yml
56-
parameters:
57-
publishingInfraVersion: 3
58-
enableSourceLinkValidation: false
59-
enableSigningValidation: false
46+
- template: /eng/common/templates-official/jobs/jobs.yml@self
47+
parameters:
48+
enablePublishUsingPipelines: true
49+
enablePublishBuildAssets: true
50+
artifacts:
51+
publish:
52+
artifacts: true
53+
manifests: true
54+
jobs:
55+
- job: SourceBuild_Managed
56+
displayName: Source-Build (Managed)
57+
pool:
58+
name: $(DncEngInternalBuildPool)
59+
image: 1es-ubuntu-2204-pt
60+
os: linux
61+
container: 'mcr.microsoft.com/dotnet-buildtools/prereqs:centos-stream8'
62+
workspace:
63+
clean: all
64+
variables:
65+
- name: _BuildConfig
66+
value: Release
67+
steps:
68+
- checkout: self
69+
submodules: recursive
70+
- template: /eng/common/templates-official/steps/source-build.yml
71+
- ${{ if notin(variables['Build.Reason'], 'PullRequest') }}:
72+
- template: /eng/common/templates-official/post-build/post-build.yml@self
73+
parameters:
74+
publishingInfraVersion: 3
75+
enableSourceLinkValidation: false
76+
enableSigningValidation: false

‎.vsts.pipelines/guardian/.gdnsuppress

Lines changed: 169 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,169 @@
1+
{
2+
"hydrated": false,
3+
"properties": {
4+
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
5+
"hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
6+
},
7+
"version": "1.0.0",
8+
"suppressionSets": {
9+
"default": {
10+
"name": "default",
11+
"createdDate": "2024-03-22 18:32:06Z",
12+
"lastUpdatedDate": "2024-03-22 18:32:06Z"
13+
}
14+
},
15+
"results": {
16+
"2123572b79400b0335c85250c4aff8f6142cea7a437a37153904f79ddafa64fc": {
17+
"signature": "2123572b79400b0335c85250c4aff8f6142cea7a437a37153904f79ddafa64fc",
18+
"alternativeSignatures": [],
19+
"memberOf": [
20+
"default"
21+
],
22+
"createdDate": "2024-03-22 18:32:06Z"
23+
},
24+
"3eced103c90fbc6d04eb6af47fd6213563948693acfc44c884d4feef4f4c4900": {
25+
"signature": "3eced103c90fbc6d04eb6af47fd6213563948693acfc44c884d4feef4f4c4900",
26+
"alternativeSignatures": [],
27+
"memberOf": [
28+
"default"
29+
],
30+
"createdDate": "2024-03-22 18:32:06Z"
31+
},
32+
"1ef98823231057834e7ee94c5b5b8316a736ab1a66bce45df0455867c7562fe9": {
33+
"signature": "1ef98823231057834e7ee94c5b5b8316a736ab1a66bce45df0455867c7562fe9",
34+
"alternativeSignatures": [],
35+
"memberOf": [
36+
"default"
37+
],
38+
"createdDate": "2024-03-22 18:32:06Z"
39+
},
40+
"fbcf8ea13d120926f0777f7f73d318d9ef6f18c9e88b844993e1bc7ba7cfc79c": {
41+
"signature": "fbcf8ea13d120926f0777f7f73d318d9ef6f18c9e88b844993e1bc7ba7cfc79c",
42+
"alternativeSignatures": [],
43+
"memberOf": [
44+
"default"
45+
],
46+
"createdDate": "2024-03-22 18:32:06Z"
47+
},
48+
"84d9c760946210c88b698e6084f5db7a33353ecef49fa9dfaf424b545014980b": {
49+
"signature": "84d9c760946210c88b698e6084f5db7a33353ecef49fa9dfaf424b545014980b",
50+
"alternativeSignatures": [],
51+
"memberOf": [
52+
"default"
53+
],
54+
"createdDate": "2024-03-22 18:32:06Z"
55+
},
56+
"a0bb972ab1a203ccb881e90b3593b65127f78d0dc007c5ca83e1e6d07338e8c3": {
57+
"signature": "a0bb972ab1a203ccb881e90b3593b65127f78d0dc007c5ca83e1e6d07338e8c3",
58+
"alternativeSignatures": [],
59+
"memberOf": [
60+
"default"
61+
],
62+
"createdDate": "2024-03-22 18:32:06Z"
63+
},
64+
"7363daf29c8c84a8ed6991e3c7fc3eb44115b0403b6b47fac99a9aa2cd3b1998": {
65+
"signature": "7363daf29c8c84a8ed6991e3c7fc3eb44115b0403b6b47fac99a9aa2cd3b1998",
66+
"alternativeSignatures": [],
67+
"memberOf": [
68+
"default"
69+
],
70+
"createdDate": "2024-03-22 18:32:06Z"
71+
},
72+
"a9485af66c8f757c02c53aa5f7cf02cde5c1c9e60e8c70768ff3a124486fa3a7": {
73+
"signature": "a9485af66c8f757c02c53aa5f7cf02cde5c1c9e60e8c70768ff3a124486fa3a7",
74+
"alternativeSignatures": [],
75+
"memberOf": [
76+
"default"
77+
],
78+
"createdDate": "2024-03-22 18:32:06Z"
79+
},
80+
"d95887551b5f4f802485e351daca216de95c8a328bab614ddefc518b1acfed26": {
81+
"signature": "d95887551b5f4f802485e351daca216de95c8a328bab614ddefc518b1acfed26",
82+
"alternativeSignatures": [],
83+
"memberOf": [
84+
"default"
85+
],
86+
"createdDate": "2024-03-22 18:32:06Z"
87+
},
88+
"9cfa6b8f64d95cf2469afcef66aae5e9c76c64a671b082ff42d00ce42c434aff": {
89+
"signature": "9cfa6b8f64d95cf2469afcef66aae5e9c76c64a671b082ff42d00ce42c434aff",
90+
"alternativeSignatures": [],
91+
"memberOf": [
92+
"default"
93+
],
94+
"createdDate": "2024-03-22 18:32:06Z"
95+
},
96+
"9c75c0e9d0e58ff6d39b74a0d8326609b8465c59ac2b03eccc7eaf4f50ae32d1": {
97+
"signature": "9c75c0e9d0e58ff6d39b74a0d8326609b8465c59ac2b03eccc7eaf4f50ae32d1",
98+
"alternativeSignatures": [],
99+
"memberOf": [
100+
"default"
101+
],
102+
"createdDate": "2024-03-22 18:32:06Z"
103+
},
104+
"74856bc4ed4c67c9c0c6c69c7e8a3a01ffcf7f9a89d332ca68a0e6ecb51ad511": {
105+
"signature": "74856bc4ed4c67c9c0c6c69c7e8a3a01ffcf7f9a89d332ca68a0e6ecb51ad511",
106+
"alternativeSignatures": [],
107+
"memberOf": [
108+
"default"
109+
],
110+
"createdDate": "2024-03-22 18:32:06Z"
111+
},
112+
"7318b6ff65864c4b5cc05a2439ffc3b7be06114f2a7007da6253fed91d1c9e56": {
113+
"signature": "7318b6ff65864c4b5cc05a2439ffc3b7be06114f2a7007da6253fed91d1c9e56",
114+
"alternativeSignatures": [],
115+
"memberOf": [
116+
"default"
117+
],
118+
"createdDate": "2024-03-22 18:32:06Z"
119+
},
120+
"b35cc2f8fe7a2aba483d0f29517153876385314dffb249548530d2e5463bdf93": {
121+
"signature": "b35cc2f8fe7a2aba483d0f29517153876385314dffb249548530d2e5463bdf93",
122+
"alternativeSignatures": [],
123+
"memberOf": [
124+
"default"
125+
],
126+
"createdDate": "2024-03-22 18:32:06Z"
127+
},
128+
"8d3d289c461dd6454c98dbcaa5fef608dae8a32c68929cffc6a9db8b2826b840": {
129+
"signature": "8d3d289c461dd6454c98dbcaa5fef608dae8a32c68929cffc6a9db8b2826b840",
130+
"alternativeSignatures": [],
131+
"memberOf": [
132+
"default"
133+
],
134+
"createdDate": "2024-03-22 18:32:06Z"
135+
},
136+
"6bb3b72839c43d3ff9a6aba1e5cc5708f01865416f020d1a26643cffff8fa74f": {
137+
"signature": "6bb3b72839c43d3ff9a6aba1e5cc5708f01865416f020d1a26643cffff8fa74f",
138+
"alternativeSignatures": [],
139+
"memberOf": [
140+
"default"
141+
],
142+
"createdDate": "2024-03-22 18:32:06Z"
143+
},
144+
"2610d6745224ba98106d22e2c66c4abce8ffafecb57f444ed8a0f2a542fa0538": {
145+
"signature": "2610d6745224ba98106d22e2c66c4abce8ffafecb57f444ed8a0f2a542fa0538",
146+
"alternativeSignatures": [],
147+
"memberOf": [
148+
"default"
149+
],
150+
"createdDate": "2024-03-22 18:32:06Z"
151+
},
152+
"40d2ad8a369cd2c1f07465a2a68b6dc202f5ea371c2576f2b0cc18c82f3aa675": {
153+
"signature": "40d2ad8a369cd2c1f07465a2a68b6dc202f5ea371c2576f2b0cc18c82f3aa675",
154+
"alternativeSignatures": [],
155+
"memberOf": [
156+
"default"
157+
],
158+
"createdDate": "2024-03-22 18:32:06Z"
159+
},
160+
"affacdd646b09264bc94c75ff52aafe58f0cd1f2c09cb50033014c38c4823d86": {
161+
"signature": "affacdd646b09264bc94c75ff52aafe58f0cd1f2c09cb50033014c38c4823d86",
162+
"alternativeSignatures": [],
163+
"memberOf": [
164+
"default"
165+
],
166+
"createdDate": "2024-03-22 18:32:06Z"
167+
}
168+
}
169+
}

0 commit comments

Comments
 (0)