62 lines
2.3 KiB
YAML
62 lines
2.3 KiB
YAML
parameters:
|
|
- name: VSCODE_CLI_ARTIFACTS
|
|
type: object
|
|
default: []
|
|
|
|
steps:
|
|
- task: UseDotNet@2
|
|
inputs:
|
|
version: 6.x
|
|
|
|
- task: EsrpCodeSigning@5
|
|
inputs:
|
|
UseMSIAuthentication: true
|
|
ConnectedServiceName: vscode-esrp
|
|
AppRegistrationClientId: $(ESRP_CLIENT_ID)
|
|
AppRegistrationTenantId: $(ESRP_TENANT_ID)
|
|
AuthAKVName: vscode-esrp
|
|
AuthSignCertName: esrp-sign
|
|
FolderPath: .
|
|
Pattern: noop
|
|
displayName: 'Install ESRP Tooling'
|
|
|
|
- ${{ each target in parameters.VSCODE_CLI_ARTIFACTS }}:
|
|
- task: DownloadPipelineArtifact@2
|
|
displayName: Download ${{ target }}
|
|
inputs:
|
|
artifact: ${{ target }}
|
|
path: $(Build.ArtifactStagingDirectory)/pkg/${{ target }}
|
|
|
|
- task: ExtractFiles@1
|
|
displayName: Extract artifact
|
|
inputs:
|
|
archiveFilePatterns: $(Build.ArtifactStagingDirectory)/pkg/${{ target }}/*.zip
|
|
destinationFolder: $(Build.ArtifactStagingDirectory)/sign/${{ target }}
|
|
|
|
- script: node build/azure-pipelines/common/sign $(Agent.RootDirectory)/_tasks/EsrpCodeSigning_*/*/net6.0/esrpcli.dll sign-darwin $(Build.ArtifactStagingDirectory)/pkg "*.zip"
|
|
env:
|
|
SYSTEM_ACCESSTOKEN: $(System.AccessToken)
|
|
displayName: Codesign
|
|
|
|
- script: node build/azure-pipelines/common/sign $(Agent.RootDirectory)/_tasks/EsrpCodeSigning_*/*/net6.0/esrpcli.dll notarize-darwin $(Build.ArtifactStagingDirectory)/pkg "*.zip"
|
|
env:
|
|
SYSTEM_ACCESSTOKEN: $(System.AccessToken)
|
|
displayName: Notarize
|
|
|
|
- ${{ each target in parameters.VSCODE_CLI_ARTIFACTS }}:
|
|
- script: |
|
|
set -e
|
|
ASSET_ID=$(echo "${{ target }}" | sed "s/unsigned_//")
|
|
mv $(Build.ArtifactStagingDirectory)/pkg/${{ target }}/${{ target }}.zip $(Build.ArtifactStagingDirectory)/pkg/${{ target }}/$ASSET_ID.zip
|
|
echo "##vso[task.setvariable variable=ASSET_ID]$ASSET_ID"
|
|
displayName: Set asset id variable
|
|
|
|
- task: 1ES.PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: $(Build.ArtifactStagingDirectory)/pkg/${{ target }}/$(ASSET_ID).zip
|
|
artifactName: $(ASSET_ID)
|
|
sbomBuildDropPath: $(Build.ArtifactStagingDirectory)/sign/${{ target }}
|
|
sbomPackageName: "VS Code macOS ${{ target }} CLI"
|
|
sbomPackageVersion: $(Build.SourceVersion)
|
|
displayName: Publish signed artifact with ID $(ASSET_ID)
|