arcade/azure-pipelines-daily.yaml at main · dotnet/arcade · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
trigger: none

schedules:
- cron: 0 12 * * *
  displayName: Daily build
  branches:
    include:
    - main
  always: true

name: $(Date:yyyMMdd)$(Rev:rr)
stages:
  - stage: SynchronizeSecrets
    jobs:
    - job: Synchronize
      displayName: Synchronize secrets
      pool:
        name: NetCore1ESPool-Internal-NoMSI
        demands: ImageOverride -equals windows.vs2026.amd64

      steps:
      # Secret synchronization only needs the repo SDK plus local tools.
      # Use the repo bootstrap so the exact preview SDK from global.json is installed reliably.
      - script: |
          call eng\common\dotnet.cmd --info
          call eng\common\dotnet.cmd tool restore
        displayName: Bootstrap repo SDK and restore dotnet tools

      - task: UseDotNet@2
        displayName: Install .NET 8 runtime
        inputs:
          packageType: runtime
          version: 8.x
          installationPath: $(System.DefaultWorkingDirectory)/.dotnet

      - task: AzureCLI@2
        displayName: Run secret-manager synchronize
        inputs:
          azureSubscription: DotNet Eng Services Secret Manager
          scriptType: pscore
          scriptLocation: inlineScript
          inlineScript: |
            Get-ChildItem .vault-config/*.yaml |% { & .\eng\common\dotnet.ps1 secret-manager synchronize --skip-untracked $_.FullName }