59 lines
2.9 KiB
YAML
59 lines
2.9 KiB
YAML
parameters:
|
|
overrideParameters: '' # Optional: to override values for parameters.
|
|
additionalParameters: '' # Optional: parameters that need user specific values eg: '-SourceToolsList @("abc","def") -ArtifactToolsList @("ghi","jkl")'
|
|
# There is some sort of bug (has been reported) in Azure DevOps where if this parameter is named
|
|
# 'continueOnError', the parameter value is not correctly picked up.
|
|
# This can also be remedied by the caller (post-build.yml) if it does not use a nested parameter
|
|
sdlContinueOnError: false # optional: determines whether to continue the build if the step errors;
|
|
dependsOn: '' # Optional: dependencies of the job
|
|
|
|
jobs:
|
|
- job: Run_SDL
|
|
dependsOn: ${{ parameters.dependsOn }}
|
|
displayName: Run SDL tool
|
|
variables:
|
|
- group: DotNet-VSTS-Bot
|
|
pool:
|
|
name: Hosted VS2017
|
|
steps:
|
|
- checkout: self
|
|
clean: true
|
|
- task: DownloadBuildArtifacts@0
|
|
displayName: Download Build Artifacts
|
|
inputs:
|
|
buildType: current
|
|
downloadType: specific files
|
|
matchingPattern: "**"
|
|
downloadPath: $(Build.SourcesDirectory)\artifacts
|
|
- powershell: eng/common/sdl/extract-artifact-packages.ps1
|
|
-InputPath $(Build.SourcesDirectory)\artifacts\BlobArtifacts
|
|
-ExtractPath $(Build.SourcesDirectory)\artifacts\BlobArtifacts
|
|
displayName: Extract Blob Artifacts
|
|
continueOnError: ${{ parameters.sdlContinueOnError }}
|
|
- powershell: eng/common/sdl/extract-artifact-packages.ps1
|
|
-InputPath $(Build.SourcesDirectory)\artifacts\PackageArtifacts
|
|
-ExtractPath $(Build.SourcesDirectory)\artifacts\PackageArtifacts
|
|
displayName: Extract Package Artifacts
|
|
continueOnError: ${{ parameters.sdlContinueOnError }}
|
|
- task: NuGetToolInstaller@1
|
|
displayName: 'Install NuGet.exe'
|
|
- task: NuGetCommand@2
|
|
displayName: 'Install Guardian'
|
|
inputs:
|
|
restoreSolution: $(Build.SourcesDirectory)\eng\common\sdl\packages.config
|
|
feedsToUse: config
|
|
nugetConfigPath: $(Build.SourcesDirectory)\eng\common\sdl\NuGet.config
|
|
externalFeedCredentials: GuardianConnect
|
|
restoreDirectory: $(Build.SourcesDirectory)\.packages
|
|
- ${{ if ne(parameters.overrideParameters, '') }}:
|
|
- powershell: eng/common/sdl/execute-all-sdl-tools.ps1 ${{ parameters.overrideParameters }}
|
|
displayName: Execute SDL
|
|
continueOnError: ${{ parameters.sdlContinueOnError }}
|
|
- ${{ if eq(parameters.overrideParameters, '') }}:
|
|
- powershell: eng/common/sdl/execute-all-sdl-tools.ps1
|
|
-GuardianPackageName Microsoft.Guardian.Cli.0.7.2
|
|
-NugetPackageDirectory $(Build.SourcesDirectory)\.packages
|
|
-AzureDevOpsAccessToken $(dn-bot-dotnet-build-rw-code-rw)
|
|
${{ parameters.additionalParameters }}
|
|
displayName: Execute SDL
|
|
continueOnError: ${{ parameters.sdlContinueOnError }}
|