This commit is contained in:
Jake Friedman 2021-05-11 00:01:36 -07:00
Родитель fffc391d4f
Коммит 5ef8f7a737
1 изменённых файлов: 23 добавлений и 3 удалений

Просмотреть файл

@ -20,7 +20,7 @@ variables:
SKIPSIGN: 'true' SKIPSIGN: 'true'
jobs: jobs:
- job: Build_projects_and_publish_vpack - job: Build_projects_and_publish_signed_zip
pool: pool:
name: Package ES Standard Build name: Package ES Standard Build
steps: steps:
@ -65,7 +65,7 @@ jobs:
- task: PowerShell@2 - task: PowerShell@2
inputs: inputs:
targetType: filePath targetType: filePath
filePath: $(Build.SourcesDirectory)/build/internal/CopyUniqueBins.ps1 filePath: $(Build.SourcesDirectory)/build/CopyUniqueBins.ps1
arguments: '-CopySource "$(Build.ArtifactStagingDirectory)/Publish" -CopyDestination "$(System.DefaultWorkingDirectory)/unsigneduniquefiles" -MappingFileOut "$(System.DefaultWorkingDirectory)/mappingfile.xml"' arguments: '-CopySource "$(Build.ArtifactStagingDirectory)/Publish" -CopyDestination "$(System.DefaultWorkingDirectory)/unsigneduniquefiles" -MappingFileOut "$(System.DefaultWorkingDirectory)/mappingfile.xml"'
failOnStderr: true failOnStderr: true
pwsh: true pwsh: true
@ -99,11 +99,31 @@ jobs:
verifySignature: 'true' verifySignature: 'true'
pageHash: 'false' pageHash: 'false'
- template: assembly-module-compliance.yml@ComplianceRepo
parameters:
# binskim
AnalyzeTarget: '$(Pipeline.Workspace)/signeduniquefiles_stage2/*__Common.Logging*.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__System.Net.IPNetwork.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__SimpleBase.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__Makaretu.*.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__FindDevice.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__FindDevice.exe'
AnalyzeSymPath: 'SRV*'
# component-governance
sourceScanPath: '$(Build.SourcesDirectory)/src'
# credscan
suppressionsFile: ''
# TermCheck
optionsRulesDBPath: ''
optionsFTPath: ''
# tsa-upload
codeBaseName: 'FindDevice'
# API Scan
softwareFolder: '$(Pipeline.Workspace)/SignedBin_Windows_Release_AllPlatforms'
softwareName: 'FactoryOrchestrator'
softwareVersion: '$(VERSIONPREFIX)$(VERSIONSUFFIXVPACK)'
APIScan: 'false'
# undo uniqify. The signed files are copied to where they were found in $(Build.ArtifactStagingDirectory). # undo uniqify. The signed files are copied to where they were found in $(Build.ArtifactStagingDirectory).
- task: PowerShell@2 - task: PowerShell@2
inputs: inputs:
targetType: filePath targetType: filePath
filePath: $(Build.SourcesDirectory)/build/internal/CopyUniqueBins.ps1 filePath: $(Build.SourcesDirectory)/build/CopyUniqueBins.ps1
arguments: '-CopySource "$(System.DefaultWorkingDirectory)/signeduniquefiles_stage2" -MappingFileIn "$(System.DefaultWorkingDirectory)/mappingfile.xml"' arguments: '-CopySource "$(System.DefaultWorkingDirectory)/signeduniquefiles_stage2" -MappingFileIn "$(System.DefaultWorkingDirectory)/mappingfile.xml"'
failOnStderr: true failOnStderr: true
pwsh: true pwsh: true