Skip to content

Commit ce0a5ba

Browse files
ericstjericstj
authored
Add CodeQL to build (#6350)
1 parent 20692fe commit ce0a5ba

File tree

1 file changed

+20
-66
lines changed

1 file changed

+20
-66
lines changed

‎build/vsts-ci.yml‎

Lines changed: 20 additions & 66 deletions
Original file line numberDiff line numberDiff line change
@@ -13,16 +13,19 @@ resources:
1313
- container: UbuntuCrossArm64Container
1414
image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-18.04-mlnet-cross-arm64
1515

16+
variables:
17+
BuildConfig: Release
18+
OfficialBuildId: $(BUILD.BUILDNUMBER)
19+
DOTNET_CLI_TELEMETRY_OPTOUT: 1
20+
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
21+
DOTNET_MULTILEVEL_LOOKUP: 0
22+
Codeql.Enabled: true
23+
Codeql.SkipTaskAutoInjection: True #default to not inject CodeQL tasks, we'll enable it in a single job.
24+
1625
jobs:
1726
################################################################################
1827
- job: Linux_x64
1928
################################################################################
20-
variables:
21-
BuildConfig: Release
22-
OfficialBuildId: $(BUILD.BUILDNUMBER)
23-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
24-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
25-
DOTNET_MULTILEVEL_LOOKUP: 0
2629
pool:
2730
name: NetCore1ESPool-Internal
2831
demands: ImageOverride -equals Build.Ubuntu.1804.Amd64
@@ -49,11 +52,6 @@ jobs:
4952
- job: Linux_arm
5053
################################################################################
5154
variables:
52-
BuildConfig: Release
53-
OfficialBuildId: $(BUILD.BUILDNUMBER)
54-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
55-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
56-
DOTNET_MULTILEVEL_LOOKUP: 0
5755
ROOTFS_DIR: '/crossrootfs/arm'
5856
pool:
5957
name: NetCore1ESPool-Internal
@@ -81,11 +79,6 @@ jobs:
8179
- job: Linux_arm64
8280
################################################################################
8381
variables:
84-
BuildConfig: Release
85-
OfficialBuildId: $(BUILD.BUILDNUMBER)
86-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
87-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
88-
DOTNET_MULTILEVEL_LOOKUP: 0
8982
ROOTFS_DIR: '/crossrootfs/arm64'
9083
pool:
9184
name: NetCore1ESPool-Internal
@@ -112,12 +105,6 @@ jobs:
112105
################################################################################
113106
- job: MacOS
114107
################################################################################
115-
variables:
116-
BuildConfig: Release
117-
OfficialBuildId: $(BUILD.BUILDNUMBER)
118-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
119-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
120-
DOTNET_MULTILEVEL_LOOKUP: 0
121108
pool:
122109
vmImage: macOS-12
123110
steps:
@@ -143,12 +130,6 @@ jobs:
143130
################################################################################
144131
- job: MacOS_Apple_Silicon
145132
################################################################################
146-
variables:
147-
BuildConfig: Release
148-
OfficialBuildId: $(BUILD.BUILDNUMBER)
149-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
150-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
151-
DOTNET_MULTILEVEL_LOOKUP: 0
152133
pool:
153134
vmImage: macOS-12
154135
steps:
@@ -180,11 +161,6 @@ jobs:
180161
- job: Windows_x86
181162
################################################################################
182163
variables:
183-
BuildConfig: Release
184-
OfficialBuildId: $(BUILD.BUILDNUMBER)
185-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
186-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
187-
DOTNET_MULTILEVEL_LOOKUP: 0
188164
_SignType: real
189165
_UseEsrpSigning: true
190166
_TeamName: DotNetCore
@@ -233,11 +209,7 @@ jobs:
233209
- job: Windows_x64
234210
################################################################################
235211
variables:
236-
BuildConfig: Release
237-
OfficialBuildId: $(BUILD.BUILDNUMBER)
238-
DOTNET_CLI_TELEMETRY_OPTOUT: 1
239-
DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
240-
DOTNET_MULTILEVEL_LOOKUP: 0
212+
Codeql.SkipTaskAutoInjection: False # run CodeQL in this job
241213
_SignType: real
242214
_UseEsrpSigning: true
243215
_TeamName: DotNetCore
@@ -297,37 +269,19 @@ jobs:
297269
- Windows_x64
298270
- MacOS_Apple_Silicon
299271
variables:
300-
- name: BuildConfig
301-
value: Release
302-
- name: OfficialBuildId
303-
value: $(BUILD.BUILDNUMBER)
304-
- name: DotnetVersionKind
305-
value: $[variables.VERSIONKIND] # If no "VERSIONKIND" variable is set when queuing the publishing task, this defaults to empty string.
306-
- name: DOTNET_CLI_TELEMETRY_OPTOUT
307-
value: 1
308-
- name: DOTNET_SKIP_FIRST_TIME_EXPERIENCE
309-
value: 1
310-
- name: DOTNET_MULTILEVEL_LOOKUP
311-
value: 0
312-
- name: NUGET_PACKAGES
313-
value: $(Build.SourcesDirectory)/.packages
314-
- name: _SignType
315-
value: real
316-
- name: _UseEsrpSigning
317-
value: true
318-
- name: _TeamName
319-
value: DotNetCore
320-
- name: _AzureDevopsFeedUrl
321-
value: https://pkgs.dev.azure.com/dnceng/public/_packaging/MachineLearning/nuget/v3/index.json
322-
- name: _SymwebSymbolServerPath
323-
value: https://microsoft.artifacts.visualstudio.com/DefaultCollection
324-
- name: _MsdlSymbolServerPath
325-
value: https://microsoftpublicsymbols.artifacts.visualstudio.com/DefaultCollection
272+
DotnetVersionKind: $[variables.VERSIONKIND] # If no "VERSIONKIND" variable is set when queuing the publishing task, this defaults to empty string.
273+
NUGET_PACKAGES: $(Build.SourcesDirectory)/.packages
274+
_SignType: real
275+
_UseEsrpSigning: true
276+
_TeamName: DotNetCore
277+
_AzureDevopsFeedUrl: https://pkgs.dev.azure.com/dnceng/public/_packaging/MachineLearning/nuget/v3/index.json
278+
_SymwebSymbolServerPath: https://microsoft.artifacts.visualstudio.com/DefaultCollection
279+
_MsdlSymbolServerPath: https://microsoftpublicsymbols.artifacts.visualstudio.com/DefaultCollection
326280

327281
# Only enable publishing in non-public, non PR scenarios.
328-
- ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
282+
${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
329283
# DotNet-Symbol-Server-Pats provides: microsoft-symbol-server-pat symweb-symbol-server-pat
330-
- group: DotNet-Symbol-Server-Pats
284+
group: DotNet-Symbol-Server-Pats
331285

332286
pool:
333287
name: NetCore1ESPool-Internal

0 commit comments

Comments
 (0)