Build pipeline for AzDevOps (#114)

Author: Andrew

SimpleBuild.ps1

@@ -0,0 +1,20 @@
+if ((Test-Path "$PSScriptRoot\out")) {
+    Remove-Item -Path $PSScriptRoot\out -Recurse -Force
+}
+
+New-Item -ItemType directory -Path $PSScriptRoot\out | Out-Null
+New-Item -ItemType directory -Path $PSScriptRoot\out\Microsoft.PowerShell.Archive | Out-Null
+
+$OutPath = Join-Path $PSScriptRoot "out"
+$OutModulePath = Join-Path $OutPath "Microsoft.PowerShell.Archive"
+
+Copy-Item -Recurse -Path "$PSScriptRoot\Microsoft.PowerShell.Archive" -Destination $OutPath -Force
+
+"Build module location:   $OutModulePath" | Write-Verbose -Verbose
+
+"Setting VSTS variable 'BuildOutDir' to '$OutModulePath'" | Write-Verbose -Verbose
+Write-Host "##vso[task.setvariable variable=BuildOutDir]$OutModulePath"
+
+$psd1ModuleVersion = (Get-Content -Path "$OutModulePath\Microsoft.PowerShell.Archive.psd1" | Select-String 'ModuleVersion="(.*)"').Matches[0].Groups[1].Value
+"Setting VSTS variable 'PackageVersion' to '$psd1ModuleVersion'" | Write-Verbose -Verbose
+Write-Host "##vso[task.setvariable variable=PackageVersion]$psd1ModuleVersion"

azure-pipelines-release.yml

@@ -0,0 +1,102 @@
+name: $(BuildDefinitionName)_$(date:yyMM).$(date:dd)$(rev:rrr)
+
+trigger: none
+
+resources:
+  repositories:
+  - repository: ComplianceRepo
+    type: github
+    endpoint: ComplianceGHRepo
+    name: PowerShell/compliance
+
+variables:
+  - name: PackageName
+    value: 'Microsoft.PowerShell.Archive'
+  - name: PackageVersion
+    value: ''
+  - name: BuildOutDir
+    value: ''
+
+stages:
+- stage: Build
+  displayName: Build module
+  pool:
+      name: 1ES
+      demands:
+      - ImageOverride -equals PSMMS2019-Secure
+  jobs:
+  - job: BuildPkg
+    displayName: Build module
+    variables:
+      - group: ESRP
+    steps:
+
+    - pwsh: |
+        & $(Build.SourcesDirectory)\SimpleBuild.ps1
+      displayName: Build Microsoft.PowerShell.Archive module
+      condition: succeededOrFailed()
+
+    - pwsh: |
+        dir "$(BuildOutDir)\*" -Recurse
+      displayName: Show BuildOutDirectory
+
+    - template: Sbom.yml@ComplianceRepo
+      parameters:
+        BuildDropPath: "$(BuildOutDir)"
+        Build_Repository_Uri: 'https://github.com/PowerShell/Microsoft.PowerShell.Archive'
+        PackageName: $(PackageName)
+        PackageVersion: $(PackageVersion)
+
+    - pwsh: |
+        dir "$(BuildOutDir)\*" -Recurse
+      displayName: Show BuildOutDirectory
+
+    - pwsh: |
+        $signSrcPath = "$(BuildOutDir)"
+        # Set signing src path variable
+        $vstsCommandString = "vso[task.setvariable variable=signSrcPath]${signSrcPath}"
+        Write-Host "sending " + $vstsCommandString
+        Write-Host "##$vstsCommandString"
+        $signOutPath = "$(Build.SourcesDirectory)\signed\Microsoft.PowerShell.Archive"
+        $null = New-Item -ItemType Directory -Path $signOutPath
+        # Set signing out path variable
+        $vstsCommandString = "vso[task.setvariable variable=signOutPath]${signOutPath}"
+        Write-Host "sending " + $vstsCommandString
+        Write-Host "##$vstsCommandString"
+        # Set path variable for guardian codesign validation
+        $vstsCommandString = "vso[task.setvariable variable=GDN_CODESIGN_TARGETDIRECTORY]${signOutPath}"
+        Write-Host "sending " + $vstsCommandString
+        Write-Host "##$vstsCommandString"
+      displayName: Setup variables for signing
+
+    - template: EsrpSign.yml@ComplianceRepo
+      parameters:
+        # the folder which contains the binaries to sign
+        buildOutputPath: $(signSrcPath)
+        # the location to put the signed output
+        signOutputPath: $(signOutPath)
+        # the certificate ID to use
+        certificateId: "CP-230012"
+        # the file pattern to use, comma separated
+        pattern: '*.psd1,*.psm1'
+
+    - pwsh: |
+        Compress-Archive -Path "$(signOutPath)\*" -DestinationPath "$(System.ArtifactsDirectory)\Microsoft.PowerShell.Archive.zip"
+      displayName: Create Microsoft.PowerShell.Archive.zip
+
+    - publish: $(System.ArtifactsDirectory)\Microsoft.PowerShell.Archive.zip
+      artifact: SignedModule
+
+    - template: script-module-compliance.yml@ComplianceRepo
+      parameters:
+        # component-governance
+        sourceScanPath: '$(signOutPath)'
+        # credscan
+        suppressionsFile: ''
+        # TermCheck
+        optionsRulesDBPath: ''
+        optionsFTPath: ''
+        # tsa-upload
+        codeBaseName: 'Microsoft_PowerShell_Archive_2_15_2022'
+        # selections
+        APIScan: false # set to false when not using Windows APIs.