Граф коммитов

9 Коммитов

Автор SHA1 Сообщение Дата
Michael Yanni b58ceacd5d
OS emojis idea (#2044)
* OS emojis

* Add emojis to 1es pipeline
2024-11-14 11:26:54 -08:00
Noah Gilson 8dbcff6733
Leverage Managed Identity Publish (#1942)
* add publish task

* move template out of steps and into jobs

* get rid of pool

* dont pass 1es pool

* add depends on chain

* use vsce latest

* run package on publi

* add approval step:

* vsixs are stored in the root, so don't check in the extension folder

* Switch to MI instead of a PAT

* Fix ps1 issue

* Only deploy on internal

* Use pool vs vmimage

* Try to fix pool condition

* Use a different pool

* Condition the name of the build based on OS

Why is windows the bomb emoji and not the windows emoji?
And why did I do this:

The windows build goes last because its in alphabetical order based on the behavior of how devops works. This is bad because it should go first and makes the other steps take longer as they depend on only the windows task. The bomb emoji is one of the first emojis thats not an emoticon before the penguin emoji so I picked that one..

* It's pretty silly you cant define a variable in a template but here we are

* Maybe it has to be in plaintext

* The deployment step is not necessary

* wait for wait job

* Set the emoji

* Move windows to the top

* Set 'use 1es pool' to true

* Switch to a different ordering so windows runs first, then linux

* try to fix bug where version is not passed and publish args is wrong

* Try to pass var into another job since we cant have a template in the jobs

* Revert "Try to pass var into another job since we cant have a template in the jobs"

This reverts commit 7bdf2dfec9.

* Try to condition the yamls omewhere else

* is yaml failing

* Revert "is yaml failing"

This reverts commit b014dd042f.

* Revert "Try to condition the yamls omewhere else"

This reverts commit 7ccb36f01c.

* Revert "try to fix bug where version is not passed and publish args is wrong"

This reverts commit 592349be71.

* Get version again

We cant return a value from a template
We cant make a template callable with jobs in another job
We cant pass a variable from one job to another if its a job in a job
We cant do so many things in yaml

* yaml indentation

* Don't skip checking out the repo, we kinda need that to get the version
2024-10-15 11:45:42 -07:00
Noah Gilson d8fc7385fe
Exclude Microbuild from scanner (#1979)
Microbuild is failing credscan following TSA upload. It has several issues and the pipeline is publishing artifacts to the root artifacts staging directory and CredScan is considering everything under that path as part of the pipeline output. MicroBuild is being installed there, so it is incorrectly being brought into the scan.

This repo does not own microbuild, we only do it for signing.
2024-10-14 17:38:21 +00:00
Noah Gilson 1cd3b7b2f5
🦅 Enable TSA Per Requirement ✈️ (#1975) 2024-10-07 13:19:08 -07:00
Noah Gilson cc797dfedb
✒️ Enable ESRP Signing on the .VSIX (#1885)
* Add fake MSBuild project to allow signing VSIX and JS

* Sign JS

* Add step to pipeline

* Restrict signing package version

* Add scripts to install signing tool locally

* only go up 1 directory

* fix display name

* fix whitespace -__-

* add build step for installing microbuild

* add sign type parameter

* dont produce alpha package in official drop

* add sign type parameter to default pipeline

* dont publish package in another directory as this causes other issues, instead copy the artifact

* acknowledge the existence of a document explaining the release and other maintenance processes

this information is more suited for internal repo changes.

* change internal stream to a different signing stream

* add dotnet public for notargets sdk

* reduce to 1 feed

* use a different feed

* Use dotnet team

* use explicit feed source

* add feed auth

* fix comment

* rename unsigned vsix so both can get dropped

* use the other type of slash for REN -__-

* try to fix path

* add packages folder with empty gitignore

* figure out dir

* fix rename command

* Fix rename

the 'unsigned' one is actually the signed one

* Fix JS File Sign

dist is at the root of each but this runs in a segregated folder

* produce binlogs and try to fix the path

* Publish SDK Extension Logs

* fix signing

* remove bad slash in path that gets parsed incorrectly

* remove \

* fix microbuild to be installed b5 js signing

* update gitignore

* fix gitignore again

* [REVERT THIS] Add a file A.ts to see if files are signed alphabetical or only non minified JS is signed

* [REVERT THIS] Add content to js to see if minify changes signing

* sign js after webpack

maybe we can sign it after the bundle is created and it will  still be able to edit the bundle vsix internals? I thought not but perhaps extension.js is getting replaced by the webpack, so lets see if this works.

* Revert "[REVERT THIS] Add content to js to see if minify changes signing"

This reverts commit ecacc6830b.

* Revert "[REVERT THIS] Add a file A.ts to see if files are signed alphabetical or only non minified JS is signed"

This reverts commit 1ab6ea1873.

* Update name of incorrect task.
2024-08-12 11:04:24 -07:00
Noah Gilson 22b76ecfe3
Enable SBOM Generation 📜 (#1816)
* try adding sbom generation

* Fix SBOM Generation

* Fix comment for old pipeline name

* improve whitespace
2024-06-04 23:56:01 +00:00
Noah Gilson 5d3ab464f5
Enable Policheck 🌎 per Compliance to Scan for Offensive Terms (#1811)
* Enable Policheck

* Remove the old pipeline

We probably should have done this post 1ES Migration

* azdo is being buggy and not letting me move from 1 to another
so undo this and do it in another pr
Revert "Remove the old pipeline"

This reverts commit 3c4cc97fa0.

* azdo is buggy no more
Revert "azdo is being buggy and not letting me move from 1 to another"

This reverts commit 012133fd34.
2024-05-28 09:38:53 -07:00
Noah Gilson 856fe78ce1
Use official templates so we get counted on the internal pie chart (#1713)
The migration tool and doc examples all use the unofficial one ecks dee

Also create a dupe of the PR pipeline so we can migrate main to that file once it is checked in and then delete the other one to rename it to a more descriptive name.
2024-03-19 15:32:11 -07:00
Noah Gilson 0289a6d048
Migrate to 1ES Pipeline (#1679)
* Migrate pipeline to 1es

* Clean up changes made from migration tool

* Separate pipeline out into many yaml files so we can have 2 pipelines without code duplication
due to new internal requirement

* remove unncessary pipeline backup

* Remove pipeline from 1es for public as it is not going to be added to the organization in public

* Update yaml loop logic
Remove devcontainer as it is out of compliance and not used by anyone

* fix mappping by adding body to the loop with indentation:

* add a 1es repository

* Create a separate 1es pipeline

* use self to search in the correct repository

* migrate to self on 1es

* use folder name pipeline-templates over templates

* use yaml over yml

* temporarily move jobs into one os

* split pools

* Move the loop to out of the job

* move the task into steps instead of a job as u cant do a job in a job

* remove template keyword

* dont call steps template in job outside of steps

* use yaml instead of yml

* add sdl

* use unique names for jobs

* use _ instead of space

* Use azure pipelines name to conform to style

* give image to each parameter

* make it 1 os for 1 os job and use different pool

* Call pool explicyk

* try to fix names

* Use different source for mac instead of 1es

* Update get-func-name

* Update public PR pipeline

* use public pool as thats what the name param is for

* give image name instead of vmimage as it snot used

* try to switch to a better pool

* try using internal pool on public as external is not available

* Publish logs to os specific folder

* condition steps so they are skipped if not needed per os

* dont care if it succeeded

* add paran

* remove paran

* use parameter pools instead of agent os

* move to 7.0 instead of 6 bc six is broken in the cache online maybe

* switch to 1es pool

* try using public  pool

* See if mac pipeline has a mirror in svc

* use image names from open

* Use vm image in the image

* Use vm image in the image

* update vm image

* try to condition the pool

* code cleanup now that everything was working

* fix whitespace

* Update vscode-test

* Update vscode-test to the new name

* respond to most pr feedback

* rename the file as I cannot change the pipeline name while its in main maybe
2024-03-14 15:09:21 -07:00