diff --git a/build/build.yml b/build/build.yml index 372d04e..632b90d 100644 --- a/build/build.yml +++ b/build/build.yml @@ -20,7 +20,7 @@ variables: SKIPSIGN: 'true' jobs: - - job: Build_projects_and_publish_vpack + - job: Build_projects_and_publish_signed_zip pool: name: Package ES Standard Build steps: @@ -65,7 +65,7 @@ jobs: - task: PowerShell@2 inputs: targetType: filePath - filePath: $(Build.SourcesDirectory)/build/internal/CopyUniqueBins.ps1 + filePath: $(Build.SourcesDirectory)/build/CopyUniqueBins.ps1 arguments: '-CopySource "$(Build.ArtifactStagingDirectory)/Publish" -CopyDestination "$(System.DefaultWorkingDirectory)/unsigneduniquefiles" -MappingFileOut "$(System.DefaultWorkingDirectory)/mappingfile.xml"' failOnStderr: true pwsh: true @@ -99,11 +99,31 @@ jobs: verifySignature: 'true' pageHash: 'false' + - template: assembly-module-compliance.yml@ComplianceRepo + parameters: + # binskim + AnalyzeTarget: '$(Pipeline.Workspace)/signeduniquefiles_stage2/*__Common.Logging*.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__System.Net.IPNetwork.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__SimpleBase.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__Makaretu.*.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__FindDevice.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__FindDevice.exe' + AnalyzeSymPath: 'SRV*' + # component-governance + sourceScanPath: '$(Build.SourcesDirectory)/src' + # credscan + suppressionsFile: '' + # TermCheck + optionsRulesDBPath: '' + optionsFTPath: '' + # tsa-upload + codeBaseName: 'FindDevice' + # API Scan + softwareFolder: '$(Pipeline.Workspace)/SignedBin_Windows_Release_AllPlatforms' + softwareName: 'FactoryOrchestrator' + softwareVersion: '$(VERSIONPREFIX)$(VERSIONSUFFIXVPACK)' + APIScan: 'false' + # undo uniqify. The signed files are copied to where they were found in $(Build.ArtifactStagingDirectory). - task: PowerShell@2 inputs: targetType: filePath - filePath: $(Build.SourcesDirectory)/build/internal/CopyUniqueBins.ps1 + filePath: $(Build.SourcesDirectory)/build/CopyUniqueBins.ps1 arguments: '-CopySource "$(System.DefaultWorkingDirectory)/signeduniquefiles_stage2" -MappingFileIn "$(System.DefaultWorkingDirectory)/mappingfile.xml"' failOnStderr: true pwsh: true