azure-pipelines-codeql.yml

variables:
  - name: _TeamName
    value: DotNetCore
  - group: SDL_Settings
    
trigger: none

schedules:
  - cron: 0 12 * * 1
    displayName: Weekly Monday CodeQL/Semmle run
    branches:
      include:
      - main
    always: true

stages:
- stage: build
  displayName: Build
  # Three phases for each of the three OSes we want to run on
  jobs:
  - template: /eng/common/templates/jobs/codeql-build.yml
    parameters:
      jobs:
      - job: Windows_NT_CSharp
        timeoutInMinutes: 90
        pool:
          name: NetCore1ESPool-Internal
          demands: ImageOverride -equals windows.vs2019.amd64

        steps:
        - checkout: self
          clean: true

        - template: /eng/common/templates/steps/execute-codeql.yml
          parameters:
            executeAllSdlToolsScript: 'eng/common/sdl/execute-all-sdl-tools.ps1'
            buildCommands: 'eng\common\cibuild.cmd -configuration Release -prepareMachine /p:Test=false /p:Sign=false'
            language: csharp
            publishGuardianDirectoryToPipeline: true
            additionalParameters: '-SourceToolsList @("semmle")
            -TsaInstanceURL $(_TsaInstanceURL)
            -TsaProjectName $(_TsaProjectName)
            -TsaNotificationEmail $(_TsaNotificationEmail)
            -TsaCodebaseAdmin $(_TsaCodebaseAdmin)
            -TsaBugAreaPath $(_TsaBugAreaPath)
            -TsaIterationPath $(_TsaIterationPath)
            -TsaRepositoryName "Arcade"
            -TsaCodebaseName "Arcade"
            -TsaPublish $True'