Skip to content

Commit e141f49

Browse files
DmitriiBobreshevDmitriiBobreshev
authored
1ES Pipelines Template Adoption (#1020)
* 1ES Pipelines Template Adoption - Added 1Es templates for azure-pipelines-extensions.yml - Changed pools for windows/ubuntu to 1ES pools * 1ES Pipelines Template Adoption - Guardian set up * 1ES Pipelines Template Adoption - Guardian set up * 1ES Pipelines Template Adoption - Guardian set up * 1ES Pipelines Template Adoption - Guardian set up * 1ES Pipelines Template Adoption - swith to 1ESPtTfsAgentBuildPool1 pool * 1ES Pipelines Template Adoption - swith to 1ES-ABTT-Shared-Pool pool * 1ES Pipelines Template Adoption - swith to 1ES-ABTT-Shared-Pool pool
1 parent cc54289 commit e141f49

File tree

2 files changed

+134
-54
lines changed

2 files changed

+134
-54
lines changed

‎.gdn/.gdnbaselines

+53
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
{
2+
"hydrated": false,
3+
"properties": {
4+
"helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines",
5+
"hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
6+
},
7+
"version": "1.0.0",
8+
"baselines": {
9+
"default": {
10+
"name": "default",
11+
"createdDate": "2024-02-12 09:43:39Z",
12+
"lastUpdatedDate": "2024-02-12 09:43:39Z"
13+
}
14+
},
15+
"results": {
16+
"b69db68dbaeed34dc8e8a9d95f105cf988a082dd0b40df9b906012a9e9667d78": {
17+
"signature": "b69db68dbaeed34dc8e8a9d95f105cf988a082dd0b40df9b906012a9e9667d78",
18+
"alternativeSignatures": [
19+
"867f1b2f02684cdad1fa698b1b1da6faea6379a658c7d12f35712aa7f19f82b1"
20+
],
21+
"memberOf": [
22+
"default"
23+
],
24+
"justification": "Needs to read user's input",
25+
"createdDate": "2024-02-12 09:43:39Z",
26+
"expirationDate": null
27+
},
28+
"2ee0cc2e621864121ae6c020602e5523286faca343e102e5f781a33acca01972": {
29+
"signature": "2ee0cc2e621864121ae6c020602e5523286faca343e102e5f781a33acca01972",
30+
"alternativeSignatures": [
31+
"20b29bfc53a5caeadea6bc5f6c567cb18366e6b0c38ccda850550eec6d2d1c6d"
32+
],
33+
"memberOf": [
34+
"default"
35+
],
36+
"justification": "Needs to read user's input",
37+
"createdDate": "2024-02-12 09:43:39Z",
38+
"expirationDate": null
39+
},
40+
"45ad44eaa03776fe24b72384ae78ed4a319fefcabf04f4d90302da421bdb2425": {
41+
"signature": "45ad44eaa03776fe24b72384ae78ed4a319fefcabf04f4d90302da421bdb2425",
42+
"alternativeSignatures": [
43+
"1ad54a7a814514c10f5323d007fca8a792f9836acef8822d23f44191f5fdb6df"
44+
],
45+
"memberOf": [
46+
"default"
47+
],
48+
"justification": "Needs to read user's input",
49+
"createdDate": "2024-02-12 09:43:39Z",
50+
"expirationDate": null
51+
}
52+
}
53+
}

‎azure-pipelines.yml

+81-54
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
# This Yaml Document has been converted by ESAI Yaml Pipeline Conversion Tool.
2+
# This pipeline will be extended to the OneESPT template
3+
# The Task 'PublishPipelineArtifact@1' has been converted to an output named '' in the templateContext section.
14
trigger:
25
- master
36
- features/*
@@ -8,60 +11,84 @@ variables:
811
- name: nodeVersion
912
value: '16.13.0'
1013

11-
jobs:
12-
#################################################
13-
- job: windows
14-
#################################################
15-
displayName: windows
16-
pool:
17-
vmImage: windows-2022
14+
resources:
15+
repositories:
16+
- repository: 1ESPipelineTemplates
17+
type: git
18+
name: 1ESPipelineTemplates/1ESPipelineTemplates
19+
ref: refs/tags/release
20+
extends:
21+
template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
22+
parameters:
23+
featureFlags:
24+
autoBaseline: false
25+
sdl:
26+
baseline:
27+
baselineSet: default
28+
baselineFile: $(Build.SourcesDirectory)/.gdn/.gdnbaselines
29+
sourceAnalysisPool:
30+
name: 1ES-ABTT-Shared-Pool
31+
image: abtt-windows-2022
32+
os: windows
33+
customBuildTags:
34+
- ES365AIMigrationTooling
35+
stages:
36+
- stage: stage
37+
jobs:
38+
#################################################
39+
- job: windows
40+
#################################################
41+
displayName: windows
42+
pool:
43+
name: 1ES-ABTT-Shared-Pool
44+
image: abtt-windows-2022
45+
os: windows
46+
steps:
47+
- template: /azure-pipelines-steps-node.yml@self
48+
parameters:
49+
nodeVersion: $(nodeVersion)
50+
- template: /azure-pipelines-steps-test-build.yml@self
1851

19-
steps:
20-
- template: azure-pipelines-steps-node.yml
21-
parameters:
22-
nodeVersion: $(nodeVersion)
52+
#################################################
53+
- job: linux
54+
#################################################
55+
displayName: Linux
56+
pool:
57+
name: 1ES-ABTT-Shared-Pool
58+
image: abtt-ubuntu-2204
59+
os: linux
60+
templateContext:
61+
outputs:
62+
- output: pipelineArtifact
63+
targetPath: 'node/_build'
64+
artifactType: 'pipeline'
65+
artifactName: 'npm-package'
66+
steps:
67+
- template: /azure-pipelines-steps-node.yml@self
68+
parameters:
69+
nodeVersion: $(nodeVersion)
70+
- template: /azure-pipelines-steps-test-build.yml@self
71+
# For CI runs on master, automatically publish packages
72+
- bash: |
73+
echo //registry.npmjs.org/:_authToken=\${NPM_TOKEN} > .npmrc
74+
npm publish || true # Ignore publish failures, usually will happen because package already exists
75+
displayName: npm publish
76+
workingDirectory: node/_build
77+
condition: and(succeeded(), in(variables['build.reason'], 'IndividualCI', 'BatchedCI', 'Manual'), in(variables['build.sourcebranch'], 'refs/heads/master'))
78+
env:
79+
NPM_TOKEN: $(npm-automation.token)
2380
24-
- template: azure-pipelines-steps-test-build.yml
81+
#################################################
82+
- job: macOS
83+
#################################################
84+
displayName: macOS
85+
pool:
86+
name: Azure Pipelines
87+
image: macOS-latest
88+
os: macOS
89+
steps:
90+
- template: /azure-pipelines-steps-node.yml@self
91+
parameters:
92+
nodeVersion: $(nodeVersion)
2593

26-
#################################################
27-
- job: linux
28-
#################################################
29-
displayName: Linux
30-
pool:
31-
vmImage: ubuntu-22.04
32-
33-
steps:
34-
- template: azure-pipelines-steps-node.yml
35-
parameters:
36-
nodeVersion: $(nodeVersion)
37-
- template: azure-pipelines-steps-test-build.yml
38-
39-
- task: PublishPipelineArtifact@1
40-
inputs:
41-
targetPath: 'node/_build'
42-
artifactType: 'pipeline'
43-
artifactName: 'npm-package'
44-
45-
# For CI runs on master, automatically publish packages
46-
- bash: |
47-
echo //registry.npmjs.org/:_authToken=\${NPM_TOKEN} > .npmrc
48-
npm publish || true # Ignore publish failures, usually will happen because package already exists
49-
displayName: npm publish
50-
workingDirectory: node/_build
51-
condition: and(succeeded(), in(variables['build.reason'], 'IndividualCI', 'BatchedCI', 'Manual'), in(variables['build.sourcebranch'], 'refs/heads/master'))
52-
env:
53-
NPM_TOKEN: $(npm-automation.token)
54-
55-
#################################################
56-
- job: macOS
57-
#################################################
58-
displayName: macOS
59-
pool:
60-
vmImage: macOS-12
61-
62-
steps:
63-
- template: azure-pipelines-steps-node.yml
64-
parameters:
65-
nodeVersion: $(nodeVersion)
66-
67-
- template: azure-pipelines-steps-test-build.yml
94+
- template: /azure-pipelines-steps-test-build.yml@self

0 commit comments

Comments
 (0)