inheritance templates (#8)

* Inheritance template that rejects a task

* Inheritance template that removes or a replace a task

Author: geekzter

templates/reject-task/azure-pipelines.yml

@@ -0,0 +1,18 @@
+trigger:
+  branches:
+    include:
+    - '*'
+
+extends:
+  template: template.yml
+  parameters:
+    buildSteps:  
+      - bash: echo Test #Passes
+        displayName: Bash A
+      - bash: echo "Test"
+        displayName: Bash B
+      - task: CmdLine@2
+        displayName: Test 3 - Will Fail
+        inputs:
+          script: echo "Script Test"
+      - script: echo Test 4 - Will Fail

templates/reject-task/template.yml

@@ -0,0 +1,37 @@
+# File: start.yml
+parameters:
+- name: buildSteps # the name of the parameter is buildSteps
+  type: stepList # data type is StepList
+  default: [] # default value of buildSteps
+stages:
+- stage: secure_buildstage
+  pool:
+    vmImage: windows-latest
+  jobs:
+  - job: secure_buildjob
+    steps:
+    - script: echo This happens before code 
+      displayName: 'Base: Pre-build'
+    - script: echo Building
+      displayName: 'Base: Build'
+
+    - ${{ each step in parameters.buildSteps }}:
+      - ${{ each pair in step }}:
+        # The 
+          ${{ if startsWith(pair.value, 'Bash') }}:
+            # Will throw syntax error: Unexpected value 'Not allowed to use Bash'
+            "Not allowed to use Bash": error
+          ${{ elseif startsWith(pair.value, 'CmdLine') }}:
+            # Will throw syntax error: Unexpected value 'Not allowed to use BatchScript'
+            "Not allowed to use BatchScript": error
+          ${{ elseif startsWith(pair.value, 'PowerShell') }}:
+            # Will throw syntax error: Unexpected value 'Not allowed to use PowerShell'
+            "Not allowed to use PowerShell": error
+          ${{ elseif startsWith(pair.value, 'ShellScript') }}:
+            # Will throw syntax error: Unexpected value 'Not allowed to use ShellScript'
+            "Not allowed to use ShellScript": error
+          ${{ else }}:
+            ${{ pair.key }}: ${{ pair.value }}
+
+    - script: echo This happens after code
+      displayName: 'Base: Signing'

templates/remove-or-replace-task/azure-pipelines.yml

@@ -0,0 +1,26 @@
+# azure-pipelines.yml
+trigger:
+  branches:
+    include:
+    - '*'
+
+schedules:
+- cron: '0 1 * * *'
+  displayName: 'Nightly build (UTC)'
+  always: 'true'
+  branches:
+    include:
+    - main
+
+extends:
+  template: template.yml
+  parameters:
+    usersteps:
+    # - task: MyTask@1
+    - bash: echo bash
+    - script: echo This step will be stripped out and not run!
+    - task: CmdLine@2
+      displayName: Test - Will be stripped out
+      inputs:
+        script: echo This step will be stripped out and not run!
+    # - task: MyOtherTask@2

templates/remove-or-replace-task/template.yml

@@ -0,0 +1,24 @@
+# template.yml
+parameters:
+- name: usersteps
+  type: stepList
+  default: []
+steps:
+# The first 3 lines will remove task CmdLine@2
+- ${{ each step in parameters.usersteps }}:
+  - ${{ if ne(step.task, 'CmdLine@2') }}:  
+    - ${{ step }}
+  # The lines below will replace task CmdLine@2
+  - ${{ else }}:  
+    - ${{ each pair in step }}:
+        ${{ if eq(pair.key, 'inputs') }}:
+          inputs:
+            ${{ each attribute in pair.value }}:
+              ${{ if eq(attribute.key, 'script') }}:
+                script: echo "Script removed by template"
+              ${{ else }}:
+                ${{ attribute.key }}: ${{ attribute.value }}
+        ${{ elseif ne(pair.key, 'displayName') }}:
+          ${{ pair.key }}: ${{ pair.value }}
+
+          displayName: 'Disabled by template: ${{ step.displayName }}'