TriggerExtensionRelease.yml

name: CI

# Run this workflow every time a commit gets pushed to main
# This triggers the ADO OneBranch CI Pipeline
on:
  push:
    branches:
      - main

permissions:
  contents: read

jobs:
    build:
        name: Trigger OneBranch ADO Pipeline (CI)
        runs-on: ubuntu-latest
        steps:
        - task: NodeTool@0
          inputs:
            versionSpec: '20'
            checkLatest: true

        - name: Harden Runner
          uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
          with:
            egress-policy: audit

        - name: Azure Pipelines Action
          uses: Azure/pipelines@v1.2
          with:
            azure-devops-project-url: https://dev.azure.com/azclitools/internal
            azure-pipeline-name: 'testOneBranchCLI-Official'
            # https://learn.microsoft.com/en-us/azure/devops/organizations/accounts/use-personal-access-tokens-to-authenticate?view=azure-devops&tabs=Windows
            # expire on 2024/9/21
            azure-devops-token: ${{ secrets.ONE_BRANCH_TOKEN }}
            azure-pipeline-variables:  '{"variable1": "${{ github.sha }}"}'