62 lines
2.0 KiB
YAML
62 lines
2.0 KiB
YAML
# This template contains a job to build the app for a single architecture and run static analysis
|
|
# tools on the binaries.
|
|
# The app is built in a production configuration to be released to the Store and the Windows image.
|
|
# This job relies on Microsoft-internal resources to run.
|
|
|
|
parameters:
|
|
platform: ''
|
|
condition: ''
|
|
|
|
jobs:
|
|
- job: Build${{ parameters.platform }}
|
|
displayName: Build ${{ parameters.platform }}
|
|
condition: ${{ parameters.condition }}
|
|
pool:
|
|
name: Package ES Custom Demands Lab A
|
|
demands:
|
|
- msbuild
|
|
- visualstudio
|
|
- ClientAlias -equals PKGESUTILAPPS
|
|
variables:
|
|
BuildConfiguration: Release
|
|
BuildPlatform: ${{ parameters.platform }}
|
|
workspace:
|
|
clean: outputs
|
|
steps:
|
|
- checkout: self
|
|
clean: true
|
|
|
|
- task: UniversalPackages@0
|
|
displayName: Download internals package
|
|
inputs:
|
|
command: download
|
|
downloadDirectory: $(Build.SourcesDirectory)
|
|
vstsFeed: WindowsApps
|
|
vstsFeedPackage: calculator-internals
|
|
vstsPackageVersion: 0.0.7
|
|
|
|
- template: ./build-single-architecture.yaml
|
|
parameters:
|
|
extraMsBuildArgs: '/p:IsStoreBuild=true'
|
|
|
|
- task: securedevelopmentteam.vss-secure-development-tools.build-task-binskim.BinSkim@3
|
|
displayName: Run BinSkim
|
|
inputs:
|
|
inputType: Basic
|
|
analyzeTarget: $(Build.BinariesDirectory)\$(BuildConfiguration)\$(BuildPlatform)\Calculator\*
|
|
analyzeVerbose: true
|
|
analyzeHashes: true
|
|
continueOnError: true
|
|
|
|
- task: securedevelopmentteam.vss-secure-development-tools.build-task-policheck.PoliCheck@1
|
|
displayName: Run PoliCheck
|
|
inputs:
|
|
targetType: F
|
|
|
|
- task: securedevelopmentteam.vss-secure-development-tools.build-task-publishsecurityanalysislogs.PublishSecurityAnalysisLogs@2
|
|
displayName: Publish security analysis logs
|
|
|
|
- task: ms.vss-governance-buildtask.governance-build-task-component-detection.ComponentGovernanceComponentDetection@0
|
|
displayName: Detect open source components
|
|
inputs:
|
|
sourceScanPath: $(Agent.BuildDirectory) |