1ES PT

2025-07-15 16:46:52 -07:00
parent 12ce7374c8
commit 6d96245bc4
4 changed files with 128 additions and 61 deletions
@@ -1,63 +1,38 @@
-  jobs:
-  - job: j
-    displayName: "Test with latest local ORT native pod"
+trigger: none

+# The `resources` specify the location and version of the 1ES PT.
+resources:
+  pipelines:
+  - pipeline: 'pod'
+    project: 'Lotus'
+    source: 'onnxruntime-ios-packaging-pipeline'
+  repositories:
+  - repository: 1esPipelines
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+
+extends:
+  template: v1/1ES.Unofficial.PipelineTemplate.yml@1esPipelines
+  parameters:
    pool:
-      vmImage: "macOS-13"
-
-    variables:
-      artifactsName: "ios_packaging_artifacts_full"
-
-    timeoutInMinutes: 60
-
-    steps:
-    - template: templates/use-xcode-version.yml
-    
-    # Download artifacts from a specific pipeline 
-    # It consumes a latest dev version ORT iOS Pod which should match with the source code
-    - task: DownloadPipelineArtifact@2
-      inputs:
-        buildType: 'specific'
-        project: 'Lotus'
-        definition: 995          #'definitionid' is obtained from `System.DefinitionId` of ORT CI: onnxruntime-ios-packaging-pipeline
-        buildVersionToDownload: 'latestFromBranch'
-        branchName: 'refs/heads/main'
-        targetPath: '$(Build.ArtifactStagingDirectory)'
-
-    - script: |
-        set -e -x
-        ls
-      workingDirectory: '$(Build.ArtifactStagingDirectory)/$(artifactsName)'
-      displayName: "List staged artifacts"
-
-    - script: |
-        POD_ARCHIVE=$(find . -name "pod-archive-onnxruntime-objc*.zip")
-        unzip ${POD_ARCHIVE} -d unzipped
-        cp -rf unzipped/objectivec/ $(Build.SourcesDirectory)/objectivec/
-      workingDirectory: '$(Build.ArtifactStagingDirectory)/$(artifactsName)'
-      displayName: Copy latest dev version ORT objectivec/ source files
-
-    # copy the pod archive to a path relative to Package.swift and set the env var required by Package.swift to use that.
-    # xcodebuild will implicitly use Package.swift and build/run the .testTarget (tests in swift/onnxTests).
-    # once that's done cleanup the copy of the pod zip file
-    - script: |
-        set -e -x
-        cd "$(Build.ArtifactStagingDirectory)/$(artifactsName)"
-        POD_ARCHIVE=$(find . -name "pod-archive-onnxruntime-c*.zip")
-
-        shasum -a 256 "$(Build.ArtifactStagingDirectory)/$(artifactsName)/${POD_ARCHIVE}"
-
-        cd "$(Build.SourcesDirectory)"
-        cp "$(Build.ArtifactStagingDirectory)/$(artifactsName)/${POD_ARCHIVE}" swift/
-        export ORT_POD_LOCAL_PATH="swift/${POD_ARCHIVE}"
-        xcodebuild test -scheme onnxruntime-Package -destination 'platform=iOS Simulator,name=iPhone 14'
-
-        xcodebuild test -scheme onnxruntime-Package -destination 'platform=macosx'
-        
-        rm swift/pod-archive-onnxruntime-c-*.zip
-      workingDirectory: "$(Build.SourcesDirectory)"
-      displayName: "Print ORT iOS Pod checksum and Test Package.swift usage"
-
-    - template: templates/component-governance-component-detection-steps.yml
-      parameters:
-        condition: 'succeeded'
+      name: Azure Pipelines
+      image: "macOS-13"
+      os: macOS      
+    sdl:
+      sourceAnalysisPool:
+        name: onnxruntime-Win-CPU-2022
+        os: windows
+      policheck:
+        enabled: true
+      credscan:
+        enabled: true
+      codeql:
+        sourceLanguages: python
+      tsa:
+        enabled: false
+        configFile: '$(Build.SourcesDirectory)\.config\tsaoptions.json'
+    stages:
+    - stage: Stage
+      jobs:
+      - template: .pipelines/templates/main.yml@self
@@ -0,0 +1,38 @@
+trigger: none
+
+# The `resources` specify the location and version of the 1ES PT.
+resources:
+  pipelines:
+  - pipeline: 'pod'
+    project: 'Lotus'
+    source: 'onnxruntime-ios-packaging-pipeline'
+  repositories:
+  - repository: 1esPipelines
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1esPipelines
+  parameters:
+    pool:
+      name: Azure Pipelines
+      image: "macOS-13"
+      os: macOS      
+    sdl:
+      sourceAnalysisPool:
+        name: onnxruntime-Win-CPU-2022
+        os: windows
+      policheck:
+        enabled: true
+      credscan:
+        enabled: true
+      codeql:
+        sourceLanguages: python
+      tsa:
+        enabled: true
+        configFile: '$(Build.SourcesDirectory)\.config\tsaoptions.json'
+    stages:
+    - stage: Stage
+      jobs:
+      - template: .pipelines/templates/main.yml@self
@@ -0,0 +1,45 @@
+jobs:
+- job: main
+  templateContext:
+    isProduction: false
+    inputs:
+    - input: pipelineArtifact
+      pipeline: 'pod'
+      artifactName: 'ios_packaging_artifacts_full'
+      targetPath: '$(Build.ArtifactStagingDirectory)/ios_packaging_artifacts_full'    
+  steps:
+  - task: UsePythonVersion@0
+    inputs:
+      versionSpec: '3.x'
+      architecture: 'x64'
+  - task: PipAuthenticate@1
+    displayName: 'Pip Authenticate'
+    inputs:
+      artifactFeeds: 'Lotus'
+  - script: |
+        POD_ARCHIVE=$(find . -name "pod-archive-onnxruntime-objc*.zip")
+        unzip ${POD_ARCHIVE} -d unzipped
+        cp -rf unzipped/objectivec/ $(Build.SourcesDirectory)/objectivec/
+      workingDirectory: '$(Build.ArtifactStagingDirectory)/$(artifactsName)'
+      displayName: Copy latest dev version ORT objectivec/ source files
+
+  # copy the pod archive to a path relative to Package.swift and set the env var required by Package.swift to use that.
+  # xcodebuild will implicitly use Package.swift and build/run the .testTarget (tests in swift/onnxTests).
+  # once that's done cleanup the copy of the pod zip file
+  - script: |
+      set -e -x
+      cd "$(Build.ArtifactStagingDirectory)/$(artifactsName)"
+      POD_ARCHIVE=$(find . -name "pod-archive-onnxruntime-c*.zip")
+
+      shasum -a 256 "$(Build.ArtifactStagingDirectory)/$(artifactsName)/${POD_ARCHIVE}"
+
+      cd "$(Build.SourcesDirectory)"
+      cp "$(Build.ArtifactStagingDirectory)/$(artifactsName)/${POD_ARCHIVE}" swift/
+      export ORT_POD_LOCAL_PATH="swift/${POD_ARCHIVE}"
+      xcodebuild test -scheme onnxruntime-Package -destination 'platform=iOS Simulator,name=iPhone 14'
+
+      xcodebuild test -scheme onnxruntime-Package -destination 'platform=macosx'
+        
+      rm swift/pod-archive-onnxruntime-c-*.zip
+    workingDirectory: "$(Build.SourcesDirectory)"
+    displayName: "Print ORT iOS Pod checksum and Test Package.swift usage"