# Pipeline link: https://dev.azure.com/msdata/Vienna/_build?definitionId=26179&_a=summary
parameters:
  - name: policyCulture
    displayName: "Policy Culture"
    type: string
    # The culture used to run policy check scan, can be region codes separated by comma, e.g. 'en-US,de-DE'
    default: 'en-US'

name: $(BuildDefinitionName)_$(Date:yyyyMMdd)$(Rev:.r) # Configure run or build numbers

variables:
  - name: sourceLocation
    value: $(System.DefaultWorkingDirectory)

trigger:
  - main
  - releases/*

pool:
  name: promptflow-1ES-win

steps:
- checkout: self

- task: PowerShell@2
  inputs:
    targetType: inline
    script: |
      Remove-Item -Recurse -Force $(sourceLocation)/benchmark/promptflow-serve/result-archive
      Remove-Item -Path $(sourceLocation)/src/promptflow-azure/promptflow/azure/_restclient/flow_service_caller.py -Force
  displayName: 'Delete benchmark HTML files, and files to avoid PoliCheck scan'

# https://eng.ms/docs/microsoft-security/cloud-ecosystem-security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/sdl-azdo-extension/PoliCheck-build-task
- task: PoliCheck@2
  inputs:
    targetType: 'F'
    targetArgument: '$(sourceLocation)'
    optionsPE: '1'
    optionsUEPATH: '$(sourceLocation)\scripts\compliance-check\user_exclusion.xml'
    result: '$(sourceLocation)\scripts\compliance-check\result.tsv'
    optionsXCLASS: 'Geopolitical'

- task: PowerShell@2
  inputs:
    targetType: inline
    script: |
      if (-Not (Test-Path "$(sourceLocation)/scripts/compliance-check/result.tsv")) {
        Write-Host "PoliCheck@2 (previous step) is not supported for forked GitHub repository, which will break the following step."
        Write-Host "So as a workaround, this step will create an empty result.tsv file."
        New-Item -ItemType Directory -Force -Path "$(sourceLocation)/scripts/compliance-check"
        Set-Location "$(sourceLocation)/scripts/compliance-check"
        New-Item -ItemType File -Name "result.tsv"
      }
  displayName: 'Workaround for fork repository'

- task: PowerShell@2
  inputs:
    targetType: 'filePath'
    filePath: '$(sourceLocation)\scripts\compliance-check\Check-PolicheckScan.ps1'
    arguments: >
      -policheckResult $(sourceLocation)\scripts\compliance-check\result.tsv
  displayName: 'Check result'

- task: PublishPipelineArtifact@1
  condition: failed()
  inputs:
    targetPath: '$(sourceLocation)\scripts\compliance-check\result.tsv'
    artifactName: 'compliance-check-result'
    publishLocation: 'pipeline'

- task: CredScan@3
  displayName: 'CredScan'
  inputs:
    scanFolder: '$(sourceLocation)'