azure-pipelines-analyzer-release.yml

trigger: none
pr: none

pool:
  name: '1ES-Hosted-DurableTaskFramework'
  demands:
    - ImageOverride -equals MMS2022TLS

steps:

# Configure all the .NET SDK versions we need
- task: UseDotNet@2
  displayName: 'Use the .NET Core 2.1 SDK (required for build signing)'
  inputs:
    packageType: 'sdk'
    version: '2.1.x'

- task: UseDotNet@2
  displayName: 'Use the .NET Core 3.1 SDK'
  inputs:
    packageType: 'sdk'
    version: '3.1.x'

- task: UseDotNet@2
  displayName: 'Use the .NET 6 SDK'
  inputs:
    packageType: 'sdk'
    version: '6.0.x'

# Use NuGet
- task: NuGetToolInstaller@1
  displayName: 'Use NuGet '

# dotnet restore
- task: DotNetCoreCLI@2
  displayName: 'dotnet restore'
  inputs:
    command: restore
    projects: '**/**/*.csproj'
    feedsToUse: config
    nugetConfigPath: 'nuget.config'

# Build durable-analyzer
- task: VSBuild@1
  displayName: 'Build Durable Analyzer'
  inputs:
    solution: '**/WebJobs.Extensions.DurableTask.Analyzers.sln'
    vsVersion: "16.0"
    configuration: Release

# Authenticode sign all the DLLs with the Microsoft certificate.
- task: EsrpCodeSigning@1
  inputs:
    ConnectedServiceName: 'ESRP Service'
    FolderPath: 'src/WebJobs.Extensions.DurableTask.Analyzers/bin/Release'
    Pattern: '*DurableTask.Analyzers.dll'
    signConfigType: 'inlineSignParams'
    inlineOperation: |
      [    
          {
            "KeyCode": "CP-230012",
            "OperationCode": "SigntoolSign",
            "Parameters": {
              "OpusName": "Microsoft",
              "OpusInfo": "http://www.microsoft.com",
              "FileDigest": "/fd \"SHA256\"",
              "PageHash": "/NPH",
              "TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
            },
            "ToolName": "sign",
            "ToolVersion": "1.0"
          },
          {
            "KeyCode": "CP-230012",
            "OperationCode": "SigntoolVerify",
            "Parameters": {},
            "ToolName": "sign",
            "ToolVersion": "1.0"
          }
      ]
    SessionTimeout: '60'
    MaxConcurrency: '50'
    MaxRetryAttempts: '5'

# SBOM generator task for additional supply chain protection
- task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0
  displayName: 'Manifest Generator '
  inputs:
    BuildDropPath: '$(System.DefaultWorkingDirectory)'

# dotnet pack
# Packaging needs to be a separate step from build.
# This will automatically pick up the signed DLLs.
- task: DotNetCoreCLI@2
  displayName: 'dotnet pack WebJobs.Extensions.DurableTask.Analyzers.csproj'
  inputs:
    command: pack
    packagesToPack: 'src/**/WebJobs.Extensions.DurableTask.Analyzers.csproj'
    configuration: Release
    packDirectory: 'azure-functions-durable-extension'
    nobuild: true

# Remove redundant symbol package(s)
- script: |
   echo *** Searching for .symbols.nupkg files to delete...
   dir /s /b *.symbols.nupkg
   
   echo *** Deleting .symbols.nupkg files...
   del /S /Q *.symbols.nupkg
   
   echo *** Listing remaining packages
   dir /s /b *.nupkg
  displayName: 'Remove Redundant Symbols Package(s)'
  continueOnError: true

# Digitally sign all the nuget packages with the Microsoft certificate.
# This appears to be an in-place signing job, which is convenient.
- task: EsrpCodeSigning@1
  inputs:
    ConnectedServiceName: 'ESRP Service'
    FolderPath: '$(System.DefaultWorkingDirectory)'
    Pattern: '*.nupkg'
    signConfigType: 'inlineSignParams'
    inlineOperation: |
      [    
          {
            "KeyCode": "CP-401405",
            "OperationCode": "NuGetSign",
            "Parameters": {},
            "ToolName": "sign",
            "ToolVersion": "1.0"
          },
          {
            "KeyCode": "CP-401405",
            "OperationCode": "NuGetVerify",
            "Parameters": {},
            "ToolName": "sign",
            "ToolVersion": "1.0"
          }
      ]
    SessionTimeout: '60'
    MaxConcurrency: '50'
    MaxRetryAttempts: '5'

# Make the nuget packages available for download in the ADO portal UI
- publish: '$(System.DefaultWorkingDirectory)/azure-functions-durable-extension'
  displayName: 'Publish nuget packages to Artifacts'
  artifact: PackageOutput