PowerShell-PowerShell/.pipelines/PowerShell-Release-Official-Azure.yml

trigger: none

parameters: # parameters are shown up in ADO UI in a build queue time
  - name: 'debug'
    displayName: 'Enable debug output'
    type: boolean
    default: false
  - name: skipPublish
    displayName: Skip PMC Publish
    type: boolean
    default: false
  - name: SKIP_SIGNING
    displayName: Skip Signing
    type: string
    default: 'NO'

name: ev2-$(BUILD.SOURCEBRANCHNAME)-prod-$(Build.BuildId)

variables:
  - template: templates/variables/PowerShell-Release-Azure-Variables.yml
    parameters:
      debug: ${{ parameters.debug }}

resources:
  repositories:
    - repository: onebranchTemplates
      type: git
      name: OneBranch.Pipelines/GovernedTemplates
      ref: refs/heads/main

  pipelines:
    - pipeline: CoOrdinatedBuildPipeline
      source: 'PowerShell-Coordinated Binaries-Official'

    - pipeline: PSPackagesOfficial
      source: 'PowerShell-Packages-Official'
      trigger:
        branches:
          include:
            - master
            - releases/*

extends:
  template: v2/OneBranch.Official.CrossPlat.yml@onebranchTemplates
  parameters:
    featureFlags:
      WindowsHostVersion:
        Version: 2022
        Network: Netlock
      linuxEsrpSigning: true
      incrementalSDLBinaryAnalysis: true
    cloudvault:
      enabled: false
    globalSdl:
      disableLegacyManifest: true
      # disabled Armory as we dont have any ARM templates to scan. It fails on some sample ARM templates.
      armory:
        enabled: false
      tsa:
        enabled: true
      credscan:
        enabled: true
        scanFolder:  $(Build.SourcesDirectory)
        suppressionsFile: $(Build.SourcesDirectory)\.config\suppress.json
      binskim:
        break: false # always break the build on binskim issues in addition to TSA upload
        exactToolVersion: 4.4.2
      policheck:
        break: true # always break the build on policheck issues. You can disable it by setting to 'false'
      tsaOptionsFile: .config\tsaoptions.json
    stages:
      - template: /.pipelines/templates/release-prep-for-ev2.yml@self
        parameters:
          skipPublish: ${{ parameters.skipPublish }}

      - template: /.pipelines/templates/release-publish-pmc.yml@self