signed.yaml

# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.

# Build Pipeline: Signed build
# Validates:
# - binaries can be built for all platforms and Release configuration
# - packages can be built for all platforms and Release configuration

name: $(date:yyyyMMdd)$(rev:rr)

variables:
  TeamName: ClrInstrumentationEngine

resources:
  repositories:
  - repository: MicroBuildTemplate
    type: git
    name: 1ESPipelineTemplates/MicroBuildTemplate
    ref: refs/tags/release

extends:
  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
  parameters:
    pool:
      name: VSEngSS-Microbuild2022-1ES
      os: windows
    sdl:
      sourceAnalysisPool:
        name: VSEngSS-MicroBuild2022-1ES
        os: windows 
      binskim:
        scanOutputDirectoryOnly: true # BinSkim will complain about VC.Tools not being Spectre compliant, but we use that for builds. This toggles for BinSkim to only scan the output files/folders.

    stages:
    - template: ../stages/build_and_package.yaml@self
      parameters:
        OneESPT: true
        IsMicroBuildInternal: true
        IncludeTests: false
        Configuration: Release
        SignType: $(SignType) # NOTE this string won't be replaced until runtime

    - stage: PostPackage
      jobs:
      - template: /build/yaml/jobs/postpackage.yaml@self
        parameters:
          OneESPT: true