8000 Add SBOM for release pipeline (#20519) · PowerShell/PowerShell@3873392 · GitHub
[go: up one dir, main page]
Skip to content

Commit 3873392

Browse files
adityapatwardhanadityapatwardhan
committed
Add SBOM for release pipeline (#20519)
1 parent 51cd9ba commit 3873392

File tree

2 files changed

+27
-3
lines changed

2 files changed

+27
-3
lines changed

‎tools/releaseBuild/azureDevOps/releasePipeline.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,12 @@ resources:
2929
name: Internal-PowerShellTeam-Tools
3030
ref: main-mirror
3131

32+
- repository: ComplianceRepo
33+
type: github
34+
endpoint: ComplianceGHRepo
35+
name: PowerShell/compliance
36+
ref: master
37+
3238
variables:
3339
- name: runCodesignValidationInjection
3440
value : false

‎tools/releaseBuild/azureDevOps/templates/release-CreateGitHubDraft.yml

Lines changed: 21 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,13 @@ steps:
77
- template: release-SetReleaseTagAndContainerName.yml
88

99
- pwsh: |
10-
Import-module '$(BUILD.SOURCESDIRECTORY)/build.psm1'
10+
Import-module '$(BUILD.SOURCESDIRECTORY)/PowerShell/build.psm1'
1111
Install-AzCopy
1212
displayName: Install AzCopy
1313
retryCountOnTaskFailure: 2
1414

1515
- pwsh: |
16-
Import-module '$(BUILD.SOURCESDIRECTORY)/build.psm1'
16+
Import-module '$(BUILD.SOURCESDIRECTORY)/PowerShell/build.psm1'
1717
$azcopy = Find-AzCopy
1818
Write-Verbose -Verbose "Found AzCopy: $azcopy"
1919
@@ -54,6 +54,24 @@ steps:
5454
Write-Verbose -Verbose -Message $fileContent
5555
displayName: Add sha256 hashes
5656

57+
- checkout: ComplianceRepo
58+
59+
- pwsh: |
60+
$releaseVersion = '$(ReleaseTag)' -replace '^v',''
61+
$vstsCommandString = "vso[task.setvariable variable=ReleaseVersion]$releaseVersion"
62+
Write-Host "sending " + $vstsCommandString
63+
Write-Host "##$vstsCommandString"
64+
displayName: 'Set release version'
65+
66+
- template: Sbom.yml@ComplianceRepo
67+
parameters:
68+
BuildDropPath: '$(PackagesRoot)'
69+
Build_Repository_Uri: 'https://github.com/powershell/powershell.git'
70+
displayName: PowerShell Hashes SBOM
71+
packageName: PowerShell Artifact Hashes
72+
packageVersion: $(ReleaseVersion)
73+
sourceScanPath: '$(PackagesRoot)'
74+
5775
- pwsh: |
5876
Import-module '$(Pipeline.Workspace)/tools/Scripts/GitHubRelease.psm1'
5977
$releaseVersion = '$(ReleaseTag)' -replace '^v',''
@@ -68,7 +86,7 @@ steps:
6886
$semanticVersion.Major.ToString() + "." + $semanticVersion.Minor.ToString() + ".md"
6987
}
7088
71-
$filePath = "$env:BUILD_SOURCESDIRECTORY/CHANGELOG/$fileName"
89+
$filePath = "$env:BUILD_SOURCESDIRECTORY/PowerShell/CHANGELOG/$fileName"
7290
Write-Verbose -Verbose "Selected Log file: $filePath"
7391
7492
if (-not (Test-Path $filePath)) {

0 commit comments

Comments
 (0)
0