1es-template-ize partner release pipeline

eng/pipelines/partner-release.yml

@@ -11,73 +11,80 @@ parameters:
   type: boolean
   default: true
 
-resources:
-  repositories:
-    - repository: azure-sdk-build-tools
-      type: git
-      name: internal/azure-sdk-build-tools
-      ref: refs/tags/azure-sdk-build-tools_20230829.1
+extends:
+  template: /eng/pipelines/templates/stages/1es-redirect.yml
+  parameters:
+    stages:
+      - stage:
+        displayName: 'Partner Release'
+        variables:
+          - name: BuildToolScripts
+            value: $(Pipeline.Workspace)/azure-sdk-build-tools/scripts
+          - name: Artifacts
+            value: $(Pipeline.Workspace)/artifacts
+          - name: EsrpArtifacts
+            value: $(Pipeline.Workspace)/packages-esrp
+          - template: /eng/pipelines/templates/variables/image.yml
+        jobs:
+        - job: Signing
+          pool:
+            name: $(WINDOWSPOOL)
+            image: $(WINDOWSVMIMAGE)
+            os: windows
+          steps:
+          - checkout: azure-sdk-build-tools
+            path: azure-sdk-build-tools
 
-variables:
-  BuildToolScripts: $(Pipeline.Workspace)/azure-sdk-build-tools/scripts
-  Artifacts: $(Pipeline.Workspace)/artifacts
-  EsrpArtifacts: $(Pipeline.Workspace)/packages-esrp
+          - template: /eng/pipelines/templates/steps/download-credscan-suppressions.yml
 
-jobs:
-- job: Signing
-  pool:
-    name: $(WINDOWSPOOL)
-    vmImage: $(WINDOWSVMIMAGE)
-    os: windows
-  steps:
-  - checkout: azure-sdk-build-tools
-    path: azure-sdk-build-tools
+          - task: PowerShell@2
+            displayName: 'Download packages from blob storage'
+            inputs:
+              targetType: filePath
+              filePath: '$(BuildToolScripts)/copy-from-azuresdkpartnerdrops.ps1'
+              arguments: '$(Artifacts) ${{ parameters.BlobPath }} $(azuresdkpartnerdrops-access-key)'
 
-  - task: PowerShell@2
-    displayName: 'Download packages from blob storage'
-    inputs:
-      targetType: filePath
-      filePath: '$(BuildToolScripts)/copy-from-azuresdkpartnerdrops.ps1'
-      arguments: '$(Artifacts) ${{ parameters.BlobPath }} $(azuresdkpartnerdrops-access-key)'
+          - template: tools/java-esrp-signing/java-esrp-signing.yml@azure-sdk-build-tools
+            parameters:
+              ArtifactDirectory: $(Artifacts)
 
-  - template: tools/java-esrp-signing/java-esrp-signing.yml@azure-sdk-build-tools
-    parameters:
-      ArtifactDirectory: $(Artifacts)
+          - template: /eng/common/pipelines/templates/steps/publish-1es-artifact.yml
+            parameters:
+              ArtifactName: packages-signed
+              ArtifactPath: $(Artifacts)
 
-  - template: /eng/common/pipelines/templates/steps/publish-artifact.yml
-    parameters:
-      ArtifactName: packages-signed
-      ArtifactPath: $(Artifacts)
-- job: Release
-  dependsOn: Signing
-  pool:
-    name: $(WINDOWSPOOL)
-    vmImage: $(WINDOWSVMIMAGE)
-    os: windows
-  steps:
-  - checkout: self
-    path: azure-sdk-for-java
+        - job: Release
+          dependsOn: Signing
+          pool:
+            name: $(WINDOWSPOOL)
+            image: $(WINDOWSVMIMAGE)
+            os: windows
+          steps:
+          - checkout: self
+            path: azure-sdk-for-java
 
-  - checkout: azure-sdk-build-tools
-    path: azure-sdk-build-tools
+          - checkout: azure-sdk-build-tools
+            path: azure-sdk-build-tools
 
-  - download: current
-    displayName: Download Signed Artifacts
-    artifact: packages-signed
+          - template: /eng/pipelines/templates/steps/download-credscan-suppressions.yml
 
-  - template: tools/gpg/gpg.yml@azure-sdk-build-tools
+          - download: current
+            displayName: Download Signed Artifacts
+            artifact: packages-signed
 
-  - template: /eng/pipelines/templates/steps/java-publishing.yml
-    parameters:
-      ArtifactDirectory: $(Pipeline.Workspace)/packages-signed
-      OutputDirectory: $(EsrpArtifacts)
-      Target: EsrpRelease
-      BuildToolsPath: $(Pipeline.Workspace)/azure-sdk-build-tools
-      JavaRepoRoot: $(Pipeline.Workspace)/azure-sdk-for-java
-      ShouldPublish: ${{ parameters.ShouldPublish }}
-      StageOnly: false
+          - template: tools/gpg/gpg.yml@azure-sdk-build-tools
 
-  - template: /eng/common/pipelines/templates/steps/publish-artifact.yml
-    parameters:
-      ArtifactName: packages-esrp-$(System.JobAttempt)
-      ArtifactPath: $(EsrpArtifacts)
+          - template: /eng/pipelines/templates/steps/java-publishing.yml
+            parameters:
+              ArtifactDirectory: $(Pipeline.Workspace)/packages-signed
+              OutputDirectory: $(EsrpArtifacts)
+              Target: EsrpRelease
+              BuildToolsPath: $(Pipeline.Workspace)/azure-sdk-build-tools
+              JavaRepoRoot: $(Pipeline.Workspace)/azure-sdk-for-java
+              ShouldPublish: ${{ parameters.ShouldPublish }}
+              StageOnly: false
+
+          - template: /eng/common/pipelines/templates/steps/publish-1es-artifact.yml
+            parameters:
+              ArtifactName: packages-esrp-$(System.JobAttempt)
+              ArtifactPath: $(EsrpArtifacts)

eng/pipelines/templates/stages/1es-redirect.yml

@@ -39,7 +39,7 @@ extends:
       binskim:
         # Exclude imported azure-sdk-build-tools gpg/azcopy binaries
         # See https://dev.azure.com/securitytools/SecurityIntegration/_wiki/wikis/Guardian/1378/Glob-Format
-        analyzeTargetGlob: +:file|**/*.jar;+:file|**/*.exe;-:f|**/tools/gpg/**/*.dll;-:f|**/tools/gpg/**/*.exe;-:f|**/tools/azcopy/**/*.exe;-:f|**/tools/azcopy/**/*.dll
+        analyzeTargetGlob: +:file|**/*.jar;+:file|**\*.jar;+:file|**/*.exe;-:f|**/tools/gpg/**/*.dll;-:f|**/tools/gpg/**/*.exe;-:f|**/tools/azcopy/**/*.exe;-:f|**/tools/azcopy/**/*.dll
       eslint:
         enabled: false
         justificationForDisabling: 'ESLint injected task has failures because it uses an old version of mkdirp. We should not fail for tools not controlled by the repo. See: https://dev.azure.com/azure-sdk/internal/_build/results?buildId=3499746'