azure-pipelines.yml

variables:
  - group: global
  - group: NuGetOrg
  - name: dotnetVersion
    value: '10.0.201'
  - name: solution
    value: "**/*.slnx"
  - name: buildConfiguration
    value: 'Release'
  - name: publishableBranches
    value: 'main,features/dotnet-10'  # Comma-separated list of branch names to publish packages for

trigger:
  tags:
    include:
      - '*'
  batch: 'true'
  branches:
    include:
      - main
      - features/*
  paths:
    exclude:
      - README.md

pr:
  autoCancel: 'true'
  branches:
    include:
      - main

resources:
  - repo: self
    fetchDepth: 0

#######################################################################################################
# VERSION
#
stages:
  - stage: version
    displayName: Version stage
    jobs:
      - job: version
        displayName: Version
        variables:
          MinVerDefaultPreReleaseIdentifiers: preview.0
          # MinVerBuildMetadata: $(Build.SourceVersion) # use git commit hash in version
        pool:
          vmImage: 'ubuntu-latest'
        steps:
          - checkout: self
            fetchDepth: 0

          - task: UseDotNet@2 # https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/dotnet-core?view=azure-devops
            displayName: Use .NET SDK
            condition: succeeded()
            inputs:
              version: $(dotnetVersion)
              performMultiLevelLookup: true
              includePreviewVersions: false

          - pwsh: |
              $env:ASPNETCORE_ENVIRONMENT = 'Development'
              dotnet --info
              Get-ChildItem Env: | Sort-Object Name | Format-Table -AutoSize
            displayName: Inspect environment
            condition: succeeded()

          - script: dotnet tool restore
            displayName: Restore .NET tools

          - powershell: |
              $version = $(dotnet minver -v d) # https://github.com/adamralph/minver#options
              $buildName = "$version" # + "_" + $env:BUILD_SOURCEBRANCHNAME
              Write-Host "##vso[build.updatebuildnumber]$buildName"
              Write-Host "##vso[task.setvariable variable=BUILD_VERSION;isOutput=true]$buildName"
            displayName: Calculate version
            name: CalculateVersion

          - powershell: |
              Get-ChildItem Env:
            displayName: Show environment variables

  #######################################################################################################
  # BUILD
  #
  - stage: build
    displayName: Build stage
    dependsOn: [ version ]
    jobs:
      - job: build
        displayName: Build & Package
        pool:
          vmImage: 'ubuntu-latest'
        variables:
          NUGET_PACKAGES: $(Pipeline.Workspace)/.nuget/packages
        steps:
          - checkout: self
            fetchDepth: 0

          - task: UseDotNet@2 # https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/dotnet-core?view=azure-devops
            displayName: Use .NET SDK
            condition: succeeded()
            inputs:
              version: $(dotnetVersion)
              performMultiLevelLookup: true
              includePreviewVersions: false

          - pwsh: |
              $env:ASPNETCORE_ENVIRONMENT = 'Development'
              dotnet --info
              Get-ChildItem Env: | Sort-Object Name | Format-Table -AutoSize
            displayName: Inspect environment
            condition: succeeded()

          - script: dotnet tool restore
            displayName: Restore .NET tools

          - task: NuGetToolInstaller@1
            displayName: Install nuget tool

          - task: Cache@2 # https://learn.microsoft.com/en-us/azure/devops/pipelines/artifacts/caching-nuget?view=azure-devops#cache-nuget-packages-1
            displayName: Dotnet cache (nuget)
            inputs:
              key: 'nuget | "$(Agent.OS)" | **/packages.lock.json,!**/bin/**,!**/obj/**'
              restoreKeys: |
                nuget | "$(Agent.OS)"
                nuget
              path: '$(NUGET_PACKAGES)'
              cacheHitVar: 'CACHE_RESTORED'

          - task: DownloadSecureFile@1
            name: signkey
            displayName: Download Secure File
            inputs:
              secureFile: 'bIT.snk'

          - task: Bash@3
            displayName: Copy secure file
            inputs:
              targetType: 'inline'
              script: |
                # Copy secure file
                cp -fr $(signkey.secureFilePath) $(Build.SourcesDirectory)/src/bIT.snk

          - task: DotNetCoreCLI@2
            displayName: Dotnet restore (nuget)
            condition: succeeded()
            # condition: and(succeeded(), ne(variables.CACHE_RESTORED, true))
            inputs:
              command: restore
              verbosityRestore: Normal

          - task: DotNetCoreCLI@2
            displayName: Dotnet build
            condition: succeeded()
            inputs:
              command: build
              projects: "$(solution)"
              arguments: "--configuration $(buildConfiguration) --no-restore --nologo"

          - task: Bash@3 # https://www.mytechramblings.com/posts/check-if-your-dotnet-app-dependencies-has-a-security-vulnerability-on-you-cicd-pipelines/
            displayName: Vulnerability scan (nuget)
            continueOnError: true
            inputs:
              targetType: 'inline'
              script: |
                dotnet list package --vulnerable --include-transitive 2>&1 | tee build.log
                echo "Analyze dotnet list package command log output..."
                if grep -q -i "critical\|high\|moderate" build.log; then
                    echo "Security vulnerabilities found"
                    exit 1
                else
                    echo "No Security vulnerabilities found"
                    exit 0
                fi

          - task: PublishPipelineArtifact@1
            displayName: Publish build artifacts
            inputs:
              targetPath: $(Build.SourcesDirectory)/src
              artifact: 'BuildOutput'

  - stage: test
    displayName: Test stage
    dependsOn: [ build ]
    jobs:
      - job: tests
        displayName: Run Tests
        pool:
          vmImage: 'ubuntu-latest'
        steps:
          - checkout: self
            fetchDepth: 0

          - task: DownloadPipelineArtifact@2 # Download build artifacts
            inputs:
              artifactName: 'BuildOutput'
              targetPath: '$(Build.SourcesDirectory)/src'

          - task: UseDotNet@2 # https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/dotnet-core?view=azure-devops
            displayName: Use .NET SDK
            condition: succeeded()
            inputs:
              version: $(dotnetVersion)
              performMultiLevelLookup: true
              includePreviewVersions: false

          - script: dotnet tool restore
            displayName: Restore .NET tools

          - bash: |
              docker compose up -d
            displayName: Docker start containers

          - bash: |
              docker ps -a
            displayName: Docker list containers

          - task: DotNetCoreCLI@2
            displayName: Dotnet test (unit)
            inputs:
              command: test
              projects: "$(Build.SourcesDirectory)/tests/**/*UnitTests.csproj"
              arguments: "--configuration $(buildConfiguration) --nologo"

          # - task: DotNetCoreCLI@2
          #   displayName: Dotnet test (integration)
          #   inputs:
          #     command: test
          #     projects: "**/*[Tt]ests/*IntegrationTests.csproj"
          #     arguments: "--configuration $(buildConfiguration) --no-restore --no-build --nologo --filter FullyQualifiedName!~Examples"

          # - task: DotNetCoreCLI@2
          #   displayName: Dotnet test (end2end)
          #   inputs:
          #     command: test
          #     projects: "**/*[Tt]ests/*EndToEndTests.csproj"
          #     arguments: "--configuration $(buildConfiguration) --no-restore --no-build --nologo --filter FullyQualifiedName!~Examples"

          - bash: |
              docker compose stop
              docker container stop $(docker container ls -aq)
              docker container rm $(docker container ls -aq)
            displayName: Docker cleanup
            condition: always()

  - stage: publish
    displayName: Publish stage
    dependsOn: [ test ]
    condition: succeeded()
    jobs:
      - job: publish
        displayName: Publish Packages
        pool:
          vmImage: 'ubuntu-latest'
        steps:
          - checkout: self
            fetchDepth: 0

          - task: DownloadPipelineArtifact@2 # Download build artifacts
            inputs:
              artifactName: 'BuildOutput'
              targetPath: '$(Build.SourcesDirectory)/src'

          - task: UseDotNet@2 # https://docs.microsoft.com/en-us/azure/devops/pipelines/ecosystems/dotnet-core?view=azure-devops
            displayName: Use .NET SDK
            condition: succeeded()
            inputs:
              version: $(dotnetVersion)
              performMultiLevelLookup: true
              includePreviewVersions: false

          - script: dotnet tool restore
            displayName: Restore .NET tools

          - powershell: |
              $currentBranch = "$(Build.SourceBranch)".Replace('refs/heads/', '')
              $publishableBranches = "$(publishableBranches)".Split(',')

              $isPublishableBranch = $publishableBranches -contains $currentBranch -or "$(Build.SourceBranch)".StartsWith('refs/tags/')
              Write-Host "##vso[task.setvariable variable=IsPublishableBranch]$isPublishableBranch"
            displayName: 'Evaluate Publishing Criteria'

          - task: DotNetCoreCLI@2
            displayName: Dotnet restore (nuget)
            condition: succeeded()
            inputs:
              command: restore
              verbosityRestore: Normal

          - task: DotNetCoreCLI@2
            displayName: Package pack (nuget)
            condition: and(succeeded(), eq(variables.IsPublishableBranch, 'True'))
            inputs:
              command: pack
              configuration: $(buildConfiguration)
              packagesToPack: '**/*.csproj;!**/*Tests.csproj;!$(Build.SourcesDirectory)/examples/**/*.csproj'
              nobuild: true
              arguments: "--no-restore --no-build --nologo"
              packDirectory: '$(Build.ArtifactStagingDirectory)/packages'
              verbosityPack: Normal

          - task: DotNetCoreCLI@2
            displayName: Package push (nuget)
            condition: and(succeeded(), eq(variables.IsPublishableBranch, 'True'))
            inputs:
              command: custom
              custom: nuget
              arguments: >
                push $(Build.ArtifactStagingDirectory)/packages/*.nupkg
                -s https://api.nuget.org/v3/index.json
                -k $(NugetOrgApiKey)
                --skip-duplicate

          - task: PublishPipelineArtifact@1
            displayName: Publish package artifacts
            condition: and(succeeded(), eq(variables.IsPublishableBranch, 'True'))
            inputs:
              targetPath: "$(Build.ArtifactStagingDirectory)/packages"
              artifactName: packages