11steps :
22
3- # TODO: Replace build artifacts with pipeline artifacts
4- - task : DownloadBuildArtifacts@0
5- displayName : Download build artifacts
6- inputs :
7- downloadType : specific
8-
9- - task : ExtractFiles@1
10- displayName : Unzip build artifacts
11- inputs :
12- archiveFilePatterns : $(Build.ArtifactStagingDirectory)/PowerShellEditorServices-CI/PowerShellEditorServices*.zip
13- destinationFolder : $(Build.ArtifactStagingDirectory)/Unsigned
3+ - download : current
4+ artifact : PowerShellEditorServices-Build
5+ displayName : Download unsigned pipeline artifacts
146
157- checkout : ComplianceRepo
168
179# NOTE: The signing templates explicitly copy everything along as they run, so
1810# the last output path has every signed (and intentionally unsigned) file.
1911- template : EsrpSign.yml@ComplianceRepo
2012 parameters :
21- buildOutputPath : $(Build.ArtifactStagingDirectory)/Unsigned
22- signOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
13+ buildOutputPath : $(Pipeline.Workspace)/PowerShellEditorServices-Build
14+ signOutputPath : $(Pipeline.Workspace )/FirstPartySigned
2315 alwaysCopy : true
2416 certificateId : CP-230012 # Authenticode certificate
2517 shouldSign : true # We always want to sign
3729
3830 - template : EsrpSign.yml@ComplianceRepo
3931 parameters :
40- buildOutputPath : $(Build.ArtifactStagingDirectory )/FirstPartySigned
41- signOutputPath : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
32+ buildOutputPath : $(Pipeline.Workspace )/FirstPartySigned
33+ signOutputPath : $(Pipeline.Workspace )/ThirdPartySigned
4234 alwaysCopy : true
4335 certificateId : CP-231522 # Third-party certificate
4436 shouldSign : true # We always want to sign
@@ -54,14 +46,14 @@ steps:
5446 - task : ArchiveFiles@2
5547 displayName : Zip finished assets
5648 inputs :
57- rootFolderOrFile : $(Build.ArtifactStagingDirectory )/ThirdPartySigned
49+ rootFolderOrFile : $(Pipeline.Workspace )/ThirdPartySigned
5850 includeRootFolder : false
5951 archiveType : zip
60- archiveFile : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
52+ archiveFile : PowerShellEditorServices.zip
6153 replaceExistingArchive : true
6254 verbose : true
6355
64- - publish : $(Build.ArtifactStagingDirectory)/ PowerShellEditorServices.zip
56+ - publish : PowerShellEditorServices.zip
6557 artifact : PowerShellEditorServices
6658 displayName : Publish signed pipeline artifacts
6759
@@ -70,18 +62,18 @@ steps:
7062- template : assembly-module-compliance.yml@ComplianceRepo
7163 parameters :
7264 # binskim
73- AnalyzeTarget : ' $(Build.ArtifactStagingDirectory )/*.dll'
65+ AnalyzeTarget : $(Pipeline.Workspace )/*.dll
7466 AnalyzeSymPath : ' SRV*'
7567 # component-governance
76- sourceScanPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
68+ sourceScanPath : $(Build.SourcesDirectory)/PowerShellEditorServices
7769 # credscan
7870 suppressionsFile : ' '
7971 # TermCheck AKA PoliCheck
80- targetArgument : ' $(Build.SourcesDirectory)/PowerShellEditorServices'
81- optionsUEPATH : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml'
72+ targetArgument : $(Build.SourcesDirectory)/PowerShellEditorServices
73+ optionsUEPATH : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/UserExclusions.xml
8274 optionsRulesDBPath : ' '
83- optionsFTPath : ' $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml'
75+ optionsFTPath : $(Build.SourcesDirectory)/PowerShellEditorServices/tools/terms/FileTypeSet.xml
8476 # tsa-upload
85- codeBaseName : ' PowerShell_PowerShellEditorServices_20210201'
77+ codeBaseName : PowerShell_PowerShellEditorServices_20210201
8678 # selections
8779 APIScan : false
0 commit comments