11steps :
22
3- # TODO: Replace build artifacts with pipeline artifacts
4- - task : DownloadBuildArtifacts@0
5- displayName : Download build artifacts
6- inputs :
7- downloadType : specific
8-
9- - task : ExtractFiles@1
10- displayName : Unzip build artifacts
11- inputs :
12- archiveFilePatterns : $(Build.ArtifactStagingDirectory)/PowerShellEditorServices-CI/PowerShellEditorServices*.zip
13- destinationFolder : $(Build.ArtifactStagingDirectory)/Unsigned
3+ - download : current
4+ displayName : Download unsigned pipeline artifacts
145
156- checkout : ComplianceRepo
167
178# NOTE: The signing templates explicitly copy everything along as they run, so
189# the last output path has every signed (and intentionally unsigned) file.
1910- template : EsrpSign.yml@ComplianceRepo
2011 parameters :
21- buildOutputPath : $(Build.ArtifactStagingDirectory)/Unsigned
22- signOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
12+ buildOutputPath : $(Pipeline.Workspace)/PowerShellEditorServices-Build-*
13+ signOutputPath : $(Pipeline.Workspace )/FirstPartySigned
2314 alwaysCopy : true
2415 certificateId : CP-230012 # Authenticode certificate
2516 shouldSign : true # We always want to sign
3728
3829 - template : EsrpSign.yml@ComplianceRepo
3930 parameters :
40- buildOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
41- signOutputPath : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
31+ buildOutputPath : $(Pipeline.Workspace )/FirstPartySigned
32+ signOutputPath : $(Pipeline.Workspace )/ThirdPartySigned
4233 alwaysCopy : true
4334 certificateId : CP-231522 # Third-party certificate
4435 shouldSign : true # We always want to sign
@@ -54,14 +45,14 @@ steps:
5445 - task : ArchiveFiles@2
5546 displayName : Zip finished assets
5647 inputs :
57- rootFolderOrFile : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
48+ rootFolderOrFile : $(Pipeline.Workspace )/ThirdPartySigned
5849 includeRootFolder : false
5950 archiveType : zip
60- archiveFile : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
51+ archiveFile : PowerShellEditorServices.zip
6152 replaceExistingArchive : true
6253 verbose : true
6354
64- - publish : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
55+ - publish : PowerShellEditorServices.zip
6556 artifact : PowerShellEditorServices
6657 displayName : Publish signed pipeline artifacts
6758
@@ -70,18 +61,18 @@ steps:
7061- template : assembly-module-compliance.yml@ComplianceRepo
7162 parameters :
7263 # binskim
73- AnalyzeTarget : ' $(Build.ArtifactStagingDirectory )/*.dll'
64+ AnalyzeTarget : $(Pipeline.Workspace )/*.dll
7465 AnalyzeSymPath : ' SRV*'
7566 # component-governance
76- sourceScanPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
67+ sourceScanPath : $(Build.SourcesDirectory)/PowerShellEditorServices
7768 # credscan
7869 suppressionsFile : ' '
7970 # TermCheck AKA PoliCheck
80- targetArgument : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
81- optionsUEPATH : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml'
71+ targetArgument : $(Build.SourcesDirectory)/PowerShellEditorServices
72+ optionsUEPATH : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml
8273 optionsRulesDBPath : ' '
83- optionsFTPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml'
74+ optionsFTPath : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml
8475 # tsa-upload
85- codeBaseName : ' PowerShell_PowerShellEditorServices_20210201'
76+ codeBaseName : PowerShell_PowerShellEditorServices_20210201
8677 # selections
8778 APIScan : false
0 commit comments