diff --git a/.azure-devops/nova-facade-release.yml b/.azure-devops/nova-facade-release.yml index 6f573a0..ab8d0d5 100644 --- a/.azure-devops/nova-facade-release.yml +++ b/.azure-devops/nova-facade-release.yml @@ -1,6 +1,13 @@ -pr: none +resources: + repositories: + - repository: 1ESPipelineTemplates + type: git + name: 1ESPipelineTemplates/1ESPipelineTemplates + ref: refs/tags/release + trigger: - main +pr: none schedules: - cron: 0 0 * * Mon displayName: Nova-Facade weekly pipeline validation @@ -14,52 +21,64 @@ variables: - name: tags value: production,externalfacing - name: serviceTreeID - value: 6F8CD842-E117-412F-BAE4-56A3B6166594 + value: ade7d667-42f5-485a-91a9-f1dc6482a9b0 - name: adoNpmFeedBaseUrl value: https://pkgs.dev.azure.com/domoreexp/_apis/packaging/feeds/npm-mirror -jobs: - - job: compliance - displayName: Compliance checks - pool: - name: 1ES-Teams-Windows-2022-DomoreexpGithub - steps: - - template: ./steps/service-tree.yml - parameters: - serviceTreeID: $(serviceTreeID) - - template: ./steps/compliance-steps.yml +extends: + template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates + stages: + - stage: Release_And_Compliance + jobs: + - job: compliance + displayName: Compliance checks + pool: + name: Azure-Pipelines-1ESPT-ExDShared + image: windows-2022 + os: windows + steps: + - template: ./steps/service-tree.yml@self + parameters: + serviceTreeID: $(serviceTreeID) + - template: ./steps/compliance-steps.yml@self - - job: Release - variables: - - group: oss-secrets - dependsOn: Compliance - pool: "1ES-Teams-Ubuntu-Latest-Compliant-NCUS" - steps: - - template: ./steps/service-tree.yml - parameters: - serviceTreeID: $(serviceTreeID) - - script: yarn - displayName: yarn - - script: | - yarn ci - displayName: build and test [test] - - script: | - git config user.email "gql-svc@microsoft.com" - git config user.name "Graphitation Service Account" - git remote set-url origin https://gql-svc:$(ossGithubPAT)@github.com/microsoft/nova-facade.git - displayName: Configure git for release - - script: yarn release -y -n $(ossNpmToken) --access public - displayName: Release - - task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0 - displayName: 📒 Generate Manifest - inputs: - BuildDropPath: $(System.DefaultWorkingDirectory) - - task: PublishPipelineArtifact@1 - displayName: 📒 Publish Manifest - inputs: - artifactName: SBom-$(System.JobAttempt) - targetPath: $(System.DefaultWorkingDirectory)/_manifest - - template: ./steps/pierce-ado-npm-mirror-cache.yml - parameters: - adoNpmFeedPat: $(adoNpmFeedPat) - adoNpmFeedBaseUrl: $(adoNpmFeedBaseUrl) + - job: Release + variables: + - group: oss-secrets + dependsOn: Compliance + pool: + name: Azure-Pipelines-1ESPT-ExDShared + image: ubuntu-latest + os: linux + templateContext: + type: releaseJob + isProduction: true + steps: + - template: ./steps/service-tree.yml@self + parameters: + serviceTreeID: $(serviceTreeID) + - script: yarn + displayName: yarn + - script: | + yarn ci + displayName: build and test [test] + - script: | + git config user.email "gql-svc@microsoft.com" + git config user.name "Graphitation Service Account" + git remote set-url origin https://gql-svc:$(ossGithubPAT)@github.com/microsoft/nova-facade.git + displayName: Configure git for release + - script: yarn release -y -n $(ossNpmToken) --access public + displayName: Release + - task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0 + displayName: 📒 Generate Manifest + inputs: + BuildDropPath: $(System.DefaultWorkingDirectory) + - task: PublishPipelineArtifact@1 + displayName: 📒 Publish Manifest + inputs: + artifactName: SBom-$(System.JobAttempt) + targetPath: $(System.DefaultWorkingDirectory)/_manifest + - template: ./steps/pierce-ado-npm-mirror-cache.yml@self + parameters: + adoNpmFeedPat: $(adoNpmFeedPat) + adoNpmFeedBaseUrl: $(adoNpmFeedBaseUrl)