ci.yml

# This yml is used by these pipelines and triggers:
# NOTE: the triggers are defined in the Azure DevOps UI as they are too complex
#
# - dotnet-source-build (public)
#   https://dev.azure.com/dnceng-public/public/_build?definitionId=240
#   - PR: ultralite build
#   - CI: release/*, every batched commit, full build
#   - Schedule: main only, full build
#
# - dotnet-unified-build (public)
#   https://dev.azure.com/dnceng-public/public/_build?definitionId=278
#   - PR: lite build
#   - CI: release/* only, every batched commit, full build
#   - Schedule: main only, full build
#
# - dotnet-source-build (internal)
#   https://dev.azure.com/dnceng/internal/_build?definitionId=1219
#   - PR: ultralite build
#   - CI: release/* and internal/release/* only, every batched commit, full build
#   - Schedule: main only, full build
#
# - dotnet-source-build-lite (internal)
#   https://dev.azure.com/dnceng/internal/_build?definitionId=1299
#   - PR: release/* and main only, lite build, on-demand trigger
#   - CI: main only, every batched commit, lite build
#
# - dotnet-unified-build (internal)
#   https://dev.azure.com/dnceng/internal/_build?definitionId=1330
#   - PR: lite build
#   - CI: release/*, internal/release/* and main only, every batched commit, full build
#
# - dotnet-unified-build-lite (internal)
#   https://dev.azure.com/dnceng/internal/_build?definitionId=1330
#   - Runs lite build and additional legs for building tests

parameters:
- name: desiredSigning
  displayName: 'Sign?'
  type: string
  default: 'Default (unsigned for manual and non-main/release builds)'
  values:
    - Signed
    - Unsigned
    - Default (unsigned for manual and non-main/release builds)

variables:
# enable source-only build for pipelines that contain the -source-build string
- name: isSourceOnlyBuild
  value: ${{ contains(variables['Build.DefinitionName'], '-source-build') }}

- name: isSourceOnlyBuildLite
  value: ${{ contains(variables['Build.DefinitionName'], '-source-build-lite') }}

- name: isUnifiedBuildLite
  value: ${{ contains(variables['Build.DefinitionName'], '-unified-build-lite') }}

- name: isScheduleTrigger
  value: ${{ eq(variables['Build.Reason'], 'Schedule') }}

- name: isPRTrigger
  value: ${{ eq(variables['Build.Reason'], 'PullRequest') }}

- ${{ if eq(variables['System.TeamProject'], 'public') }}:
  - name: skipComponentGovernanceDetection  # we run CG on internal builds only
    value: true

  - name: Codeql.Enabled  # we run CodeQL on internal builds only
    value: false

- template: /eng/common/templates-official/variables/pool-providers.yml@self
- template: /src/sdk/eng/pipelines/templates/variables/vmr-build.yml@self

resources:
  repositories:
  - repository: 1ESPipelineTemplates
    type: git
    name: 1ESPipelineTemplates/1ESPipelineTemplates
    ref: refs/tags/release

extends:
  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
  parameters:
    featureFlags:
      EnableDefenderForLinux: true
      incrementalSDLBinaryAnalysis: true
    sdl:
      sourceAnalysisPool:
        name: $(DncEngInternalBuildPool)
        image: 1es-windows-2022
        os: windows

      # Spotbugs is failing the Windows builds: https://github.com/dotnet/dnceng/issues/2740
      spotBugs:
        enabled: false

      codeql:
        compiled:
          enabled: true
        # Runs analysis in the SDL stage and not every job
        # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/codeql#improving-codeql-performance
        runSourceLanguagesInSourceAnalysis: true

    containers:
      ${{ variables.almaLinuxContainerName }}:
        image: ${{ variables.almaLinuxContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.alpineContainerName }}:
        image: ${{ variables.alpineContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.centOSStreamContainerName }}:
        image: ${{ variables.centOSStreamContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.fedoraContainerName }}:
        image: ${{ variables.fedoraContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.ubuntuContainerName }}:
        image: ${{ variables.ubuntuContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.ubuntuArmContainerName }}:
        image: ${{ variables.ubuntuArmContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.azurelinuxX64CrossContainerName }}:
        image: ${{ variables.azurelinuxX64CrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.azurelinuxArmCrossContainerName }}:
        image: ${{ variables.azurelinuxArmCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.azurelinuxArm64CrossContainerName }}:
        image: ${{ variables.azurelinuxArm64CrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.azurelinuxX64MuslCrossContainerName }}:
        image: ${{ variables.azurelinuxX64MuslCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.azurelinuxArmMuslCrossContainerName }}:
        image: ${{ variables.azurelinuxArmMuslCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.azurelinuxArm64MuslCrossContainerName }}:
        image: ${{ variables.azurelinuxArm64MuslCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.androidCrossContainerName }}:
        image: ${{ variables.androidCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.linuxBionicCrossContainerName }}:
        image: ${{ variables.linuxBionicCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.browserCrossContainerName }}:
        image: ${{ variables.browserCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}
      ${{ variables.wasiCrossContainerName }}:
        image: ${{ variables.wasiCrossContainerImage }}
        options: ${{ variables.defaultContainerOptions }}

    stages:
    - ${{ if and(ne(variables.isPRTrigger, 'true'), eq(variables['System.TeamProject'], 'internal')) }}:
      - template: /eng/pipelines/templates/stages/vmr-scan.yml@self

    - template: /src/sdk/eng/pipelines/templates/stages/vmr-build.yml@self
      parameters:
        isBuiltFromVmr: true
        isSourceOnlyBuild: ${{ variables.isSourceOnlyBuild }}
        desiredSigning: ${{ parameters.desiredSigning }}
        ${{ if eq(variables.isScheduleTrigger, 'true') }}:
          scope: full
        ${{ elseif eq(variables.isSourceOnlyBuildLite, 'true') }}:
          scope: lite
        ${{ elseif and(eq(variables.isPRTrigger, 'true'), eq(variables.isSourceOnlyBuild, 'true')) }}:
          scope: ultralite
        ${{ elseif and(or(eq(variables.isPRTrigger, 'true'), eq(variables.isUnifiedBuildLite, 'true')), ne(variables.isSourceOnlyBuild, 'true')) }}:
          scope: lite
        ${{ else }}:
          scope: full