azure-pipelines.yml

# Node.js
# Build a general Node.js project with npm.
# Add steps that analyze code, save build artifacts, upload, and more:
# https://docs.microsoft.com/azure/devops/pipelines/languages/javascript

schedules:
  # Run from Monday to Friday at 2:0 UTC (https://docs.microsoft.com/en-us/azure/devops/pipelines/process/scheduled-triggers?view=azure-devops&tabs=yaml#cron-syntax)
  - cron: "0 2 * * 1-5"
    displayName: Nightly build
    branches:
      include:
        - master
    always: true

trigger:
  - master

pool:
  vmImage: ubuntu-latest

variables:
  - group: sonar-scanner-azdo-variables
  - group: artifactory_access
  - name: System.debug
    value: true
  - name: NPM_CONFIG_registry
    value: $(ARTIFACTORY_URL)/api/npm/npm
  - name: isMain
    value: $[eq(variables['Build.SourceBranch'], 'refs/heads/master')]
  - name: azureBranch
    value: $[coalesce(variables['System.PullRequest.SourceBranch'], 'master')]

lockBehavior: sequential

stages:
  - stage: build
    displayName: "Build:"
    jobs:
      - job: npminstall
        displayName: "NPM Install, CI and Build"
        variables:
          publisher: $(SonarSourceITPublisher)
          npm_config_cache: $(Pipeline.Workspace)/.npm
        steps:
          - task: Cache@2
            inputs:
              key: 'version2 | npm | "$(Agent.OS)" | **/package-lock.json'
              restoreKeys: |
                npm | "$(Agent.OS)"
              path: $(npm_config_cache)
            displayName: Cache npm
          - task: Bash@3
            displayName: "Update NPM"
            env:
              NPM_CONFIG_//repox.jfrog.io/artifactory/api/npm/:_authToken: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
              npm_config_cache: $(npm_config_cache)
            inputs:
              targetType: "inline"
              script: |
                sudo -E npm i -g npm@11
                sudo chown -R $(whoami):$(whoami) "$npm_config_cache" 2>/dev/null || true
          - task: Npm@1
            displayName: "Install all extension dependencies"
            env:
              ARTIFACTORY_TOKEN: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
              NPM_CONFIG_//repox.jfrog.io/artifactory/api/npm/:_authToken: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
            inputs:
              command: "install"
          - task: Bash@3
            displayName: "Append build id in version in manifests"
            inputs:
              targetType: "inline"
              script: |
                npx gulp ci:azure:hotfix-extensions-version
                npx gulp ci:azure:hotfix-tasks-version

          - task: Npm@1
            displayName: "Create dogfood extension"
            inputs:
              command: "custom"
              customCommand: "run test-build -- --publisher $(publisher)"

          - task: CopyFiles@2
            displayName: "Copy dogfood extensions to build directory"
            inputs:
              SourceFolder: "$(Build.SourcesDirectory)/dist"
              Contents: "*.vsix"
              TargetFolder: "$(Agent.BuildDirectory)/extensions/dogfood"

          - task: Bash@3
            displayName: "Suffix task names with *Test for the test extension"
            inputs:
              targetType: "inline"
              script: |
                npx gulp ci:azure:hotfix-tasks-names

          - task: Npm@1
            displayName: "Create test extension"
            inputs:
              command: "custom"
              customCommand: "run test-build -- --publisher $(publisher)"

          - task: CopyFiles@2
            displayName: "Copy test extensions to build directory"
            inputs:
              SourceFolder: "$(Build.SourcesDirectory)/dist"
              Contents: "*.vsix"
              TargetFolder: "$(Agent.BuildDirectory)/extensions/test"

          - task: Bash@3
            displayName: "Fetch extensions versions and rename vsix"
            name: versions
            inputs:
              targetType: "inline"
              script: |
                npx gulp ci:azure:get-extensions-version

          - task: PublishBuildArtifacts@1
            displayName: "Publish artifacts on the build"
            inputs:
              PathtoPublish: "$(Agent.BuildDirectory)/extensions"
              ArtifactName: "extensions"
  - stage: run_qa
    condition: succeeded()
    dependsOn: build
    displayName: "Re-publish test extension & Run QA"
    jobs:
      - job: install_test_extension
        displayName: "Install the extension under test"
        variables:
          publisher: $(SonarSourceITPublisher)
          sqExtensionVersion: $[stageDependencies.build.npminstall.outputs['versions.SQ_VERSION']]
          scExtensionVersion: $[stageDependencies.build.npminstall.outputs['versions.SC_VERSION']]
          itOrg: $(SonarSourceITOrganization)
        steps:
          - bash: |
              echo "##vso[task.setvariable variable=SQ_VERSION;isoutput=true]$(sqExtensionVersion)"
              echo "##vso[task.setvariable variable=SC_VERSION;isoutput=true]$(scExtensionVersion)"
            name: versions

          # Install TFX
          - task: TfxInstaller@4
            displayName: "Install TFX CLI"
            env:
              NPM_CONFIG_//repox.jfrog.io/artifactory/api/npm/:_authToken: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
            inputs:
              version: "v0.10.x"

          # Publish Extension
          - task: DownloadBuildArtifacts@1
            displayName: "Download artifacts"
            inputs:
              buildType: "current"
              downloadType: "single"
              artifactName: "extensions"
              downloadPath: "$(System.ArtifactsDirectory)"
          - task: PublishAzureDevOpsExtension@5
            displayName: "Publish SonarCloud test extension"
            inputs:
              connectTo: "AzureRM"
              connectedServiceNameAzureRM: "$(MarketplaceARMServiceConnection)"
              fileType: "vsix"
              vsixFile: "$(System.ArtifactsDirectory)/extensions/test/sonar-scanner-azdo-$(scExtensionVersion)-sonarcloud.vsix"
              extensionName: "[Test] SonarCloud ITs"
              updateTasksVersion: false
              updateTasksId: false
              extensionVisibility: "private"
              shareWith: "$(itOrg)"
              cwd: "$(System.ArtifactsDirectory)"
          # Install extension
          - task: InstallAzureDevOpsExtension@5
            displayName: "Install Test extension in IT org"
            inputs:
              connectTo: "AzureRM"
              connectedServiceNameAzureRM: "$(MarketplaceARMServiceConnection)"
              method: "id"
              publisherId: "$(publisher)"
              extensionId: "sonarcloud-test"
              accounts: "https://devops.azure.com/$(itOrg)"
      - job: run_its
        dependsOn: install_test_extension
        displayName: "Run ITs"
        variables:
          npm_config_cache: $(Pipeline.Workspace)/.npm
        steps:
          - task: Cache@2
            inputs:
              key: 'version2 | npm | "$(Agent.OS)" | **/package-lock.json'
              restoreKeys: |
                npm | "$(Agent.OS)"
              path: $(npm_config_cache)
            displayName: Cache npm
          - task: Npm@1
            displayName: "Install all dependencies"
            env:
              ARTIFACTORY_TOKEN: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
              NPM_CONFIG_//repox.jfrog.io/artifactory/api/npm/:_authToken: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
            inputs:
              command: "install"
          - task: AzureCLI@2
            displayName: "Acquire token for integration testing"
            inputs:
              connectedServiceNameARM: "$(IntegrationTestARMServiceConnection)"
              scriptType: "pscore"
              scriptLocation: "inlineScript"
              useGlobalConfig: true
              inlineScript: |
                $accessToken = az account get-access-token --resource 499b84ac-1321-427f-aa17-267ca6975798 --query "accessToken" --output tsv
                write-host "##vso[task.setsecret]$accessToken"
                write-host "##vso[task.setvariable variable=INTEGRATION_TESTING_TOKEN;issecret=true]$accessToken"
          - task: Bash@3
            displayName: "Run the ITs"
            env:
              SONARCLOUD_TOKEN: $(SonarCloudToken)
              AZURE_TOKEN: $(INTEGRATION_TESTING_TOKEN)
              AZURE_BRANCH: $(azureBranch)
            inputs:
              targetType: "inline"
              script: |
                npm run test-its

  - stage: publish_dogfood
    displayName: "Publish dogfood extension"
    condition: and(succeeded(), eq(variables['isMain'], true))
    jobs:
      - job: "publish_dogfood"
        variables:
          publisher: $(SonarSourceITPublisher)
          scExtensionVersion: $[stageDependencies.run_qa.install_test_extension.outputs['versions.SC_VERSION']]
          sqExtensionVersion: $[stageDependencies.run_qa.install_test_extension.outputs['versions.SQ_VERSION']]
        steps:
          - task: TfxInstaller@4
            displayName: "Install TFX CLI"
            env:
              NPM_CONFIG_//repox.jfrog.io/artifactory/api/npm/:_authToken: $(ARTIFACTORY_PRIVATE_READER_ACCESS_TOKEN)
            inputs:
              version: "v0.10.x"

          - task: DownloadBuildArtifacts@1
            displayName: "Download artifacts"
            inputs:
              buildType: "current"
              downloadType: "single"
              artifactName: "extensions"
              downloadPath: "$(System.ArtifactsDirectory)"

          - task: PublishAzureDevOpsExtension@5
            displayName: "Publish SonarCloud dogfood extension"
            inputs:
              connectTo: "AzureRM"
              connectedServiceNameAzureRM: "$(MarketplaceARMServiceConnection)"
              fileType: "vsix"
              vsixFile: "$(System.ArtifactsDirectory)/extensions/dogfood/sonar-scanner-azdo-$(scExtensionVersion)-sonarcloud.vsix"
              extensionName: "[Dogfood] SonarCloud"
              extensionId: "sonarcloud-dogfood"
              updateTasksVersion: false
              updateTasksId: false
              extensionVisibility: "private"
              shareWith: "sonarsource"
              cwd: "$(System.ArtifactsDirectory)"

          - task: PublishAzureDevOpsExtension@5
            displayName: "Publish SonarQube Server dogfood extension"
            inputs:
              connectTo: "AzureRM"
              connectedServiceNameAzureRM: "$(MarketplaceARMServiceConnection)"
              fileType: "vsix"
              vsixFile: "$(System.ArtifactsDirectory)/extensions/dogfood/sonar-scanner-azdo-$(sqExtensionVersion)-sonarqube.vsix"
              extensionName: "[Dogfood] SonarQube Server"
              extensionId: "sonarqube-dogfood"
              updateTasksVersion: false
              updateTasksId: false
              extensionVisibility: "private"
              shareWith: "sonarsource"
              cwd: "$(System.ArtifactsDirectory)"