azure-pipelines.yml

trigger:
- master

pr:
  autoCancel: true
  branches:
    include:
    - master
    - release/*
  paths:
    exclude:
    - docs/*
    - THIRD-PARTY-NOTICES.TXT
    - License.txt

variables:
  - name: _TeamName
    value: DotNetCore
  - name: _SignType
    value: real
  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
    # DotNet-Blob-Feed provides: dotnetfeed-storage-access-key-1
    # DotNet-Diagnostics-SDL-Params provides Tsa* variables for SDL checks.
    # DotNet-Symbol-Server-Pats provides: provides microsoft-symbol-server-pat and symweb-symbol-server-pat
    # Publish-Build-Assets provides: MaestroAccessToken, BotAccount-dotnet-maestro-bot-PAT
    - group: DotNet-Blob-Feed
    - group: DotNet-Diagnostics-SDL-Params
    - group: DotNet-Symbol-Server-Pats
    - group: Publish-Build-Assets
  
resources:
  containers:
  - container: LinuxContainer
    image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-16.04-09ca40b-20190520220842

stages:
  - stage: build
    displayName: Build and Test SymStore

    # Three jobs for each of the three OSes we want to run on
    jobs:
    - template: /eng/common/templates/jobs/jobs.yml
      parameters:
        enableMicrobuild: true
        enableTelemetry: true
        enablePublishBuildArtifacts: true
        enablePublishTestResults: true
        helixRepo: dotnet/symstore

        jobs:
        - job: Windows_NT
          pool:
            ${{ if or(eq(variables['System.TeamProject'], 'public'), in(variables['Build.Reason'], 'PullRequest')) }}:
              name: NetCorePublic-Pool
              queue: BuildPool.Windows.10.Amd64.VS2017.Open
            ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
              name: NetCoreInternal-Pool
              queue: BuildPool.Windows.10.Amd64.VS2017

          variables:
          - DOTNET_ROLL_FORWARD_ON_NO_CANDIDATE_FX: 2
          - _InternalBuildArgs: ''

          strategy:
            matrix:
              build_debug:
                _BuildConfig: Debug
                _InternalBuildArgs: ''
              build_release:
                _BuildConfig: Release
                ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
                  _InternalBuildArgs: /p:DotNetSignType=$(_SignType) 
                                      /p:TeamName=$(_TeamName)
                                      /p:DotNetPublishUsingPipelines=$(PublishPackages)
                                      /p:OfficialBuildId=$(BUILD.BUILDNUMBER)

          steps:
          - script: eng\common\cibuild.cmd
              -configuration $(_BuildConfig)
              -prepareMachine
              -verbosity normal
              $(_InternalBuildArgs)
            name: Build
            displayName: Build
            condition: succeeded()

        - job: Linux
          container: LinuxContainer
          pool:
            name: Hosted Ubuntu 1604

          strategy:
            matrix:
              debug:
                _BuildConfig: Debug
              release:
                _BuildConfig: Release

          steps:
          - script: eng/common/cibuild.sh
              --configuration $(_BuildConfig)
              --prepareMachine
            name: Build
            displayName: Build
            condition: succeeded()

        - job: MacOS
          pool:
            name: Hosted macOS

          strategy:
            matrix:
              debug:
                _BuildConfig: Debug
              release:
                _BuildConfig: Release

          steps:
          - script: eng/common/cibuild.sh
              --configuration $(_BuildConfig)
              --prepareMachine
            name: Build
            displayName: Build
            condition: succeeded()

    - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
      - template: /eng/common/templates/job/publish-build-assets.yml
        parameters:
          configuration: Release
          dependsOn: Windows_NT
          publishUsingPipelines: true
          pool:
            name: NetCoreInternal-Pool
            queue: buildpool.windows.10.amd64.vs2017

  - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
    - template: /eng/common/templates/post-build/post-build.yml
      parameters:
        # This is to enable SDL runs part of Post-Build Validation Stage.
        # as well as NuGet, SourceLink, and signing validation.
        # The variables get imported from group dotnet-diagnostics-sdl-params
        enableSourceLinkValidation: true
        symbolPublishingAdditionalParameters: '/p:PublishSpecialClrFiles=false'
        SDLValidationParameters:
          enable: true
          continueOnError: false
          params: ' -SourceToolsList @("policheck","credscan")
          -TsaInstanceURL $(_TsaInstanceURL)
          -TsaProjectName $(_TsaProjectName)
          -TsaNotificationEmail $(_TsaNotificationEmail)
          -TsaCodebaseAdmin $(_TsaCodebaseAdmin)
          -TsaBugAreaPath $(_TsaBugAreaPath)
          -TsaIterationPath $(_TsaIterationPath)
          -TsaRepositoryName "symstore"
          -TsaCodebaseName "symstore"
          -TsaPublish $True'
          artifactNames:
          - 'PackageArtifacts'