Add 1ES pipeline

.azurepipelines/publish-maven-1ES.yml

@@ -0,0 +1,83 @@
+# This Yaml Document has been converted by ESAI Yaml Pipeline Conversion Tool.
+# Please make sure to check all the converted content, it is your team's responsibility to make sure that the pipeline is still valid and functions as expected.
+# The SBOM tasks have been removed because they are not required for the unofficial template.
+# You can manually enable SBOM in the unofficial template if needed, othewise its automatically enabled when using official template. https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sbom
+# This pipeline will be extended to the OneESPT template
+# If you are not using the E+D shared hosted pool with windows-2022, replace the pool section with your hosted pool, os, and image name. If you are using a Linux image, you must specify an additional windows image for SDL: https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sdlanalysis/overview#how-to-specify-a-windows-pool-for-the-sdl-source-analysis-stage
+# The Task 'PublishBuildArtifacts@1' has been converted to an output named 'Publish Artifact: Release' in the templateContext section.
+trigger: none
+name: $(date:yyyyMMdd)$(rev:.r)
+variables:
+- name: BUILD_DIR
+  value: $(Build.ArtifactStagingDirectory)
+- group: AppCenter-SDK-Android Bintray and Maven
+resources:
+  repositories:
+  - repository: 1ESPipelineTemplates
+    type: git
+    name: 1ESPipelineTemplates/1ESPipelineTemplates
+    ref: refs/tags/release
+extends:
+  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  parameters:
+    pool:
+      name: Azure-Pipelines-1ESPT-ExDShared
+      image: windows-2022
+      os: windows
+    customBuildTags:
+    - ES365AIMigrationTooling-BulkMigrated
+    stages:
+    - stage: stage
+      jobs:
+      - job: Phase_1
+        displayName: MacOS
+        cancelTimeoutInMinutes: 1
+        templateContext:
+          outputs:
+          - output: pipelineArtifact
+            displayName: 'Publish Artifact: Release'
+            targetPath: $(Build.ArtifactStagingDirectory)/com/microsoft
+            artifactName: Release
+        steps:
+        - checkout: self
+          clean: true
+          submodules: recursive
+          fetchTags: false
+        - task: JavaToolInstaller@0
+          displayName: Use Java 11
+          inputs:
+            versionSpec: 11
+            jdkArchitectureOption: x64
+            jdkSourceOption: PreInstalled
+        - task: DownloadSecureFile@1
+          displayName: Download GPG-key
+          inputs:
+            secureFile: 98b107ca-fab1-42c0-819d-2871c022869c
+        - task: Bash@3
+          displayName: Put Azure Credentials
+          inputs:
+            filePath: ./scripts/put-azure-credentials.sh
+            arguments: $(AZURE_USERNAME) $(AZURE_PASSWORD)
+        - task: ShellScript@2
+          displayName: Configure bintray
+          inputs:
+            scriptPath: scripts/put-bintray-secrets-gradle.sh
+            args: $(MAVEN_USER) $(MAVEN_KEY) $(GDP_SIGNING_KEY_ID) "$(Agent.TempDirectory)/appcenter-gpg-key.gpg" $(GDP_KEY_PASSWORD)
+            disableAutoCwd: true
+        - task: Bash@3
+          displayName: Set NDK version
+          inputs:
+            filePath: ./scripts/set-ndk-version.sh
+        - task: Gradle@1
+          displayName: Gradle publish to Maven local
+          inputs:
+            tasks: publish
+            publishJUnitResults: false
+        - task: SFP.release-tasks.custom-build-release-task.EsrpRelease@4
+          displayName: ESRP Release
+          inputs:
+            ConnectedServiceName: ESRP Release
+            FolderLocation: $(Build.ArtifactStagingDirectory)/com/microsoft
+            Owners: lucen@microsoft.com
+            Approvers: lucen@microsoft.com
+          enabled: false