azure-pipelines.yml

trigger:
- main

pr:
  autoCancel: true
  branches:
    include:
    - main
    - release/*
  paths:
    exclude:
    - docs/*
    - THIRD-PARTY-NOTICES.TXT
    - License.txt

variables:
  - name: _TeamName
    value: DotNetCore
  - name: _SignType
    value: real
  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
    # DotNet-Blob-Feed provides: dotnetfeed-storage-access-key-1
    # DotNet-Diagnostics-SDL-Params provides Tsa* variables for SDL checks.
    # DotNet-Symbol-Server-Pats provides: provides microsoft-symbol-server-pat and symweb-symbol-server-pat
    # Publish-Build-Assets provides: MaestroAccessToken, BotAccount-dotnet-maestro-bot-PAT
    - group: DotNet-Blob-Feed
    - group: DotNet-Diagnostics-SDL-Params
    - group: DotNet-Symbol-Server-Pats
    - group: Publish-Build-Assets
  
resources:
  containers:
  - container: LinuxContainer
    image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-20.04

stages:
  - stage: build
    displayName: Build and Test SymStore

    # Three jobs for each of the three OSes we want to run on
    jobs:
    - template: /eng/common/templates/jobs/jobs.yml
      parameters:
        enableMicrobuild: true
        enableTelemetry: true
        enablePublishBuildArtifacts: true
        enablePublishTestResults: true
        helixRepo: dotnet/symstore

        jobs:
        - job: Windows_NT
          pool:
            ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
              name: NetCore-Public
              demands: ImageOverride -equals windows.vs2022.amd64.open
            ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
              name: NetCore1ESPool-Internal
              demands: ImageOverride -equals windows.vs2022.amd64

          variables:
          - DOTNET_ROLL_FORWARD_ON_NO_CANDIDATE_FX: 2
          - _InternalBuildArgs: ''

          strategy:
            matrix:
              build_debug:
                _BuildConfig: Debug
                _InternalBuildArgs: ''
              build_release:
                _BuildConfig: Release
                ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
                  _InternalBuildArgs: /p:DotNetSignType=$(_SignType) 
                                      /p:TeamName=$(_TeamName)
                                      /p:DotNetPublishUsingPipelines=$(PublishPackages)
                                      /p:OfficialBuildId=$(BUILD.BUILDNUMBER)

          steps:
          - script: eng\common\cibuild.cmd
              -configuration $(_BuildConfig)
              -prepareMachine
              -verbosity normal
              $(_InternalBuildArgs)
            name: Build
            displayName: Build
            condition: succeeded()

        - ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
          - job: Linux
            container: LinuxContainer
            pool:
              vmImage: ubuntu-22.04

            strategy:
              matrix:
                debug:
                  _BuildConfig: Debug
                release:
                  _BuildConfig: Release

            steps:
            - script: eng/common/cibuild.sh
                --configuration $(_BuildConfig)
                --prepareMachine
              name: Build
              displayName: Build
              condition: succeeded()

          - job: MacOS
            pool:
              vmImage: macOS-latest

            strategy:
              matrix:
                debug:
                  _BuildConfig: Debug
                release:
                  _BuildConfig: Release

            steps:
            - script: eng/common/cibuild.sh
                --configuration $(_BuildConfig)
                --prepareMachine
              name: Build
              displayName: Build
              condition: succeeded()

    - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
      - template: /eng/common/templates/job/publish-build-assets.yml
        parameters:
          configuration: Release
          dependsOn: Windows_NT
          publishUsingPipelines: true
          pool:
            name: NetCore1ESPool-Internal
            demands: ImageOverride -equals  windows.vs2022.amd64

  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
    - template: /eng/common/templates/post-build/post-build.yml
      parameters:
        # This is to enable SDL runs part of Post-Build Validation Stage.
        # as well as NuGet, SourceLink, and signing validation.
        # The variables get imported from group dotnet-diagnostics-sdl-params
        publishingInfraVersion: 3
        enableSourceLinkValidation: true
        enableSigningValidation: true
        enableSymbolValidation: false
        enableNugetValidation: true
        symbolPublishingAdditionalParameters: '/p:PublishSpecialClrFiles=false'
        publishInstallersAndChecksums: true
        SDLValidationParameters:
          enable: true
          continueOnError: false
          params: ' -SourceToolsList @("policheck","credscan")
          -TsaInstanceURL $(_TsaInstanceURL)
          -TsaProjectName $(_TsaProjectName)
          -TsaNotificationEmail $(_TsaNotificationEmail)
          -TsaCodebaseAdmin $(_TsaCodebaseAdmin)
          -TsaBugAreaPath $(_TsaBugAreaPath)
          -TsaIterationPath $(_TsaIterationPath)
          -TsaRepositoryName "symstore"
          -TsaCodebaseName "symstore"
          -TsaPublish $True'
          artifactNames:
          - 'PackageArtifacts'