.pipelines/PowerShell-Packages-Official.yml - master - githubmirror/PowerShell

.pipelines/PowerShell-Packages-Official.yml
122 строки3 KB
Aditya Patwardhan
Use .NET SDK and NuGet feed early access for build, package and release pipelines (#27795)
10 авг 2026, 21:39
10 авг 2026, 21:399f74707
trigger: none

parameters: # parameters are shown up in ADO UI in a build queue time
  - name: ForceAzureBlobDelete
    displayName: Delete Azure Blob
    type: string
    values:
    - true
    - false
    default: false
  - name: 'debug'
    displayName: 'Enable debug output'
    type: boolean
    default: false
  - name: InternalSDKBlobURL
    displayName: URL to the blob having internal .NET SDK
    type: string
    default: ' '
  - name: ReleaseTagVar
    displayName: Release Tag
    type: string
    default: 'fromBranch'
  - name: SKIP_SIGNING
    displayName: Skip Signing
    type: string
    default: 'NO'
  - name: disableNetworkIsolation
    type: boolean
    default: false
  - name: IsEarlyAccess
    type: boolean
    default: false
  - name: EarlyAccessFeed
    displayName: Early Access Feed
    type: string
    default: 'net10'
    values:
      - 'net8'
      - 'net9'
      - 'net10'
  - name: DOTNET_RUNTIME_VERSION
    displayName: Runtime version of early access build
    type: string
    default: ' '
  - name: DOTNET_SDK_VERSION
    displayName: SDK version of early access build
    type: string
    default: ' '

name: pkgs-$(BUILD.SOURCEBRANCHNAME)-prod-$(Build.BuildId)

variables:
  - template: templates/variables/PowerShell-Packages-Variables.yml
    parameters:
      debug: ${{ parameters.debug }}
      ForceAzureBlobDelete: ${{ parameters.ForceAzureBlobDelete }}
      ReleaseTagVar: ${{ parameters.ReleaseTagVar }}
      disableNetworkIsolation: ${{ parameters.disableNetworkIsolation }}
      EarlyAccessFeed: ${{ parameters.EarlyAccessFeed }}
      IsEarlyAccess: ${{ parameters.IsEarlyAccess }}

resources:
  pipelines:
    - pipeline: CoOrdinatedBuildPipeline
      source: 'PowerShell-Coordinated Binaries-Official'
      trigger:
        branches:
          include:
            - master
            - releases/*

  repositories:
    - repository: onebranchTemplates
      type: git
      name: OneBranch.Pipelines/GovernedTemplates
      ref: refs/heads/main

extends:
  template: v2/OneBranch.Official.CrossPlat.yml@onebranchTemplates
  parameters:
    cloudvault:
      enabled: false
    featureFlags:
      WindowsHostVersion:
        Version: 2022
        Network: KS3
      LinuxHostVersion:
        Network: KS3
      linuxEsrpSigning: true
      incrementalSDLBinaryAnalysis: true
      disableNetworkIsolation: ${{ variables.disableNetworkIsolation }}
    globalSdl:
      disableLegacyManifest: true
      # disabled Armorty as we dont have any ARM templates to scan. It fails on some sample ARM templates.
      armory:
        enabled: false
      sbom:
        enabled: true
      compiled:
        enabled: false
      credscan:
        enabled: true
        scanFolder:  $(Build.SourcesDirectory)
        suppressionsFile: $(Build.SourcesDirectory)\.config\suppress.json
      cg:
        enabled: true
        ignoreDirectories: '.devcontainer,demos,docker,docs,src,test,tools/packaging'
      binskim:
        enabled: false
        exactToolVersion: 4.4.2
      # APIScan requires a non-Ready-To-Run build
      apiscan:
        enabled: false
      tsaOptionsFile: .config\tsaoptions.json
    stages:
    - template: templates/stages/PowerShell-Packages-Stages.yml
      parameters:
        OfficialBuild: true
        IsEarlyAccess: ${{ parameters.IsEarlyAccess }}
        DOTNET_RUNTIME_VERSION: ${{ parameters.DOTNET_RUNTIME_VERSION }}
        DOTNET_SDK_VERSION: ${{ parameters.DOTNET_SDK_VERSION }}
        EarlyAccessFeed: ${{ parameters.EarlyAccessFeed }}