azure-pipelines.yml

jobs:
- job: Default
  timeoutInMinutes: 360
  pool:
    vmImage: 'macos-latest'

  variables:
  - name: BuildConfiguration
    value: Debug
  - name: TeamName
    value: Mono.Addins
  - name: Codeql.Enabled
    value: $[eq(variables['Build.SourceBranch'], 'refs/heads/main')]
  - name: Codeql.TSAEnabled
    value: true
  - name: Codeql.SkipTaskAutoInjection  # Auto injection is disabled for now, since it causes the sign process to hang.
    value: true                         # Instead, CodeQL tasks are explicitly inserted. The finalize task is inserted before the signing task to avoid the hang.
  - name: BUILDSECMON_OPT_IN
    value: true
  - name: Packaging.EnableSBOMSigning
    value: true
  - name: System.Debug
    value: true


  steps:

  - task: CodeQL3000Init@0

  - task: MicroBuildSigningPlugin@3
    displayName: 'Install Signing Plugin'
    inputs:
      signType: 'Real'
      azureSubscription: 'MicroBuild Signing Task (DevDiv)'
    env:
        SYSTEM_ACCESSTOKEN: $(System.AccessToken)

  - task: UseDotNet@2
    displayName: 'Install .NET 3.1'
    inputs:
      packageType: 'sdk'
      version: '3.1.413'

  - task: UseDotNet@2
    displayName: 'Install .NET 6'
    inputs:
      packageType: 'sdk'
      version: '6.0.100'

  - task: DotNetCoreCLI@2
    displayName: 'Build solution Mono.Addins.sln'
    inputs:
      command: build
      arguments: '/p:Configuration=$(BuildConfiguration)'

  - task: DotNetCoreCLI@2
    displayName: 'Generate packages'
    inputs:
      command: custom
      custom: pack
      projects: Mono.Addins.sln
      arguments: '/p:Configuration=$(BuildConfiguration)'
      nobuild: true
      workingDirectory: $(Build.SourcesDirectory)

  - task: DotNetCoreCLI@2
    displayName: Test
    inputs:
      command: 'test'
      workingDirectory: '$(Build.SourcesDirectory)/Test/UnitTests'

  - task: CodeQL3000Finalize@0

  - task: Bash@3
    displayName: 'Generate package file list'
    inputs:
      targetType: 'inline'
      script: |
        echo "<filelist>" > $(build.sourcesdirectory)/bin/files.xml
        echo " <certificate certnumbers='401405'>" >> $(build.sourcesdirectory)/bin/files.xml
        find $(build.sourcesdirectory)/bin -name "*.nupkg" -exec echo "  <file srcpath='{}' dstpath='{}'></file>" \; >> $(build.sourcesdirectory)/bin/files.xml
        echo " </certificate>" >> $(build.sourcesdirectory)/bin/files.xml
        echo "</filelist>" >> $(build.sourcesdirectory)/bin/files.xml
      workingDirectory: '$(build.sourcesdirectory)/bin'

  - task: Bash@3
    displayName: 'Sign Packages'
    inputs:
      targetType: 'inline'
      script: |
        dotnet $(MBSIGN_APPFOLDER)/ddsignfiles.dll /filelist:$(build.sourcesdirectory)/bin/files.xml
      workingDirectory: '$(build.sourcesdirectory)/bin'

  - task: CopyFiles@1
    displayName: 'Copy Files to: $(build.artifactstagingdirectory)'
    inputs:
      SourceFolder: '$(build.sourcesdirectory)/bin'
      Contents: '*.nupkg'
      TargetFolder: '$(build.artifactstagingdirectory)'
    condition: succeededOrFailed()

  - task: PublishBuildArtifacts@1
    displayName: 'Publish Artifact: drop'
    inputs:
      PathtoPublish: '$(build.artifactstagingdirectory)'
    condition: succeededOrFailed()

  # Use separate directory when generating SBOM to avoid MicroBuild files being included
  - task: Bash@3
    displayName: 'Copy files for SBOM'
    inputs:
      targetType: 'inline'
      script: |
        mkdir sbom
        cp *.nupkg sbom
      workingDirectory: '$(build.artifactstagingdirectory)'

  - task: ManifestGeneratorTask@0
    inputs:
      PackageName: 'Mono.Addins'
      BuildDropPath: '$(build.artifactstagingdirectory)/sbom'
      ManifestDirPath: '$(build.sourcesdirectory)'
      AdditionalComponentDetectorArgs: '--DirectoryExclusionList **/Test/**;**/Samples/**;**/mautil/**'
    displayName: 'Generating SBOM'

  - task: PublishBuildArtifacts@1
    inputs:
      pathToPublish: '$(build.sourcesdirectory)/_manifest'
      artifactName: SBOM
    displayName: Publish SBOM