Add compliance; Fix ps1 path
This commit is contained in:
Родитель
fffc391d4f
Коммит
5ef8f7a737
|
@ -20,7 +20,7 @@ variables:
|
||||||
SKIPSIGN: 'true'
|
SKIPSIGN: 'true'
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
- job: Build_projects_and_publish_vpack
|
- job: Build_projects_and_publish_signed_zip
|
||||||
pool:
|
pool:
|
||||||
name: Package ES Standard Build
|
name: Package ES Standard Build
|
||||||
steps:
|
steps:
|
||||||
|
@ -65,7 +65,7 @@ jobs:
|
||||||
- task: PowerShell@2
|
- task: PowerShell@2
|
||||||
inputs:
|
inputs:
|
||||||
targetType: filePath
|
targetType: filePath
|
||||||
filePath: $(Build.SourcesDirectory)/build/internal/CopyUniqueBins.ps1
|
filePath: $(Build.SourcesDirectory)/build/CopyUniqueBins.ps1
|
||||||
arguments: '-CopySource "$(Build.ArtifactStagingDirectory)/Publish" -CopyDestination "$(System.DefaultWorkingDirectory)/unsigneduniquefiles" -MappingFileOut "$(System.DefaultWorkingDirectory)/mappingfile.xml"'
|
arguments: '-CopySource "$(Build.ArtifactStagingDirectory)/Publish" -CopyDestination "$(System.DefaultWorkingDirectory)/unsigneduniquefiles" -MappingFileOut "$(System.DefaultWorkingDirectory)/mappingfile.xml"'
|
||||||
failOnStderr: true
|
failOnStderr: true
|
||||||
pwsh: true
|
pwsh: true
|
||||||
|
@ -99,11 +99,31 @@ jobs:
|
||||||
verifySignature: 'true'
|
verifySignature: 'true'
|
||||||
pageHash: 'false'
|
pageHash: 'false'
|
||||||
|
|
||||||
|
- template: assembly-module-compliance.yml@ComplianceRepo
|
||||||
|
parameters:
|
||||||
|
# binskim
|
||||||
|
AnalyzeTarget: '$(Pipeline.Workspace)/signeduniquefiles_stage2/*__Common.Logging*.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__System.Net.IPNetwork.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__SimpleBase.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__Makaretu.*.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__FindDevice.dll;$(Pipeline.Workspace)/signeduniquefiles_stage2/*__FindDevice.exe'
|
||||||
|
AnalyzeSymPath: 'SRV*'
|
||||||
|
# component-governance
|
||||||
|
sourceScanPath: '$(Build.SourcesDirectory)/src'
|
||||||
|
# credscan
|
||||||
|
suppressionsFile: ''
|
||||||
|
# TermCheck
|
||||||
|
optionsRulesDBPath: ''
|
||||||
|
optionsFTPath: ''
|
||||||
|
# tsa-upload
|
||||||
|
codeBaseName: 'FindDevice'
|
||||||
|
# API Scan
|
||||||
|
softwareFolder: '$(Pipeline.Workspace)/SignedBin_Windows_Release_AllPlatforms'
|
||||||
|
softwareName: 'FactoryOrchestrator'
|
||||||
|
softwareVersion: '$(VERSIONPREFIX)$(VERSIONSUFFIXVPACK)'
|
||||||
|
APIScan: 'false'
|
||||||
|
|
||||||
# undo uniqify. The signed files are copied to where they were found in $(Build.ArtifactStagingDirectory).
|
# undo uniqify. The signed files are copied to where they were found in $(Build.ArtifactStagingDirectory).
|
||||||
- task: PowerShell@2
|
- task: PowerShell@2
|
||||||
inputs:
|
inputs:
|
||||||
targetType: filePath
|
targetType: filePath
|
||||||
filePath: $(Build.SourcesDirectory)/build/internal/CopyUniqueBins.ps1
|
filePath: $(Build.SourcesDirectory)/build/CopyUniqueBins.ps1
|
||||||
arguments: '-CopySource "$(System.DefaultWorkingDirectory)/signeduniquefiles_stage2" -MappingFileIn "$(System.DefaultWorkingDirectory)/mappingfile.xml"'
|
arguments: '-CopySource "$(System.DefaultWorkingDirectory)/signeduniquefiles_stage2" -MappingFileIn "$(System.DefaultWorkingDirectory)/mappingfile.xml"'
|
||||||
failOnStderr: true
|
failOnStderr: true
|
||||||
pwsh: true
|
pwsh: true
|
||||||
|
|
Загрузка…
Ссылка в новой задаче