mcp/eng/pipelines/templates/jobs/vsix/pack-and-sign-vsix.yml at 694137b2831e125cda76209ec06c6de202bf58df · microsoft/mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
parameters:
- name: DependsOn
  type: object

jobs:
- job: SignAndPackVSIX
  displayName: "Sign and Pack VSIX"
  dependsOn: ${{ parameters.DependsOn }}
  condition: and(succeeded(), ne(variables['NoPackagesChanged'], 'true'))
  steps:
  - checkout: self

  # Download the signed MCP server binaries for this OS
  - download: current
    artifact: build_info
    displayName: "Download build_info"

  - download: current
    artifact: binaries_signed
    displayName: "Download binaries_signed"

  - task: UseNode@1
    displayName: 'Install Node.js 24'
    inputs:
      version: '24.x'

  - template: /eng/common/pipelines/templates/steps/create-authenticated-npmrc.yml

  # --- VS Code Extension Packaging Steps ---
  - task: Powershell@2
    displayName: "Pack binaries for VSIX"
    inputs:
      pwsh: true
      filePath: $(Build.SourcesDirectory)/eng/scripts/Pack-Vsix.ps1
      arguments: >
        -BuildInfoPath '$(Pipeline.Workspace)/build_info/build_info.json'
        -ArtifactsPath '$(Pipeline.Workspace)/binaries_signed'
        -OutputPath '$(Build.ArtifactStagingDirectory)'

  - template: pipelines/steps/azd-vscode-signing.yml@azure-sdk-build-tools
    parameters:
      Path: $(Build.ArtifactStagingDirectory)
      Pattern: '**/*.signature.p7s'

  - task: Powershell@2
    displayName: "Verify VSIX Signing"
    inputs:
      pwsh: true
      filePath: $(Build.SourcesDirectory)/eng/scripts/Verify-VsixSignatures.ps1
      arguments: >
        -ArtifactsPath '$(Build.ArtifactStagingDirectory)'

  - template: /eng/common/pipelines/templates/steps/publish-1es-artifact.yml
    parameters:
      ArtifactPath: $(Build.ArtifactStagingDirectory)
      ArtifactName: packages_vsix_signed