Setup Wrench CI and add code signing jobs

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Code owners
+* @Unity-Technologies/cinepipe-maintainers

.github/pull_request_template.md

@@ -0,0 +1,52 @@
+## Purpose of this PR
+
+**Ticket/Jira #:**
+
+<!-- Description of feature/change. Links to screenshots, design docs, user docs, etc. Remember reviewers may be outside your team, and not know your feature/area that should be explained more. -->
+
+
+## Testing
+
+**Functional Testing status:**
+
+<!-- Explanation of what's tested, how tested and existing or new automation tests. Can include manual testing by self and/or QA. Specify test plans. Rarely acceptable to have no testing.  -->
+
+**Performance Testing status:**
+
+<!-- Could this PR affect performance? If so, what has been done to measure time taken / memory used etc? Can include new or existing performance tests. Also see [Ensuring Performance by Default](https://confluence.unity3d.com/display/DEV/Ensuring+Performance+by+Default). -->
+
+## Overall Product Risks
+<!-- See Testing Status, Complexity and Halo Effect for your PR](https://confluence.unity3d.com/display/DEV/Testing+Status%2C+Complexity+and+Halo+Effect+for+your+PR). -->
+
+**Complexity:**
+<!-- (Minimal / Low / Medium / High) -->
+
+**Halo Effect:**
+<!-- (Minimal / Low / Medium / High) -->
+
+## Documentation & UX Writing
+
+<!-- Indicate here what kind of review you need from a Technical writer. Feel free to precise what to focus on and give context as needed. -->
+
+| User facing text to review | <!-- Y/N --> | Details |
+| :--- | :--- | :--- |
+| User interface |  |  |
+| Public API docs |  |  |
+| Changelog |  |  |
+
+<!-- Technical writer may update this section, for example to define if yes or no the user manual or any other documentation needs to be updated, and link to a JIRA documentation ticket if the answer is yes. If you don't know, just put a question mark.-->
+
+| Documentation halo effect | <!-- Y/N/? --> | Jira link |
+| :--- | :--- | :--- |
+| User manual |  |  |
+| Other docs |  |  |
+
+## Additional information
+
+**Note to reviewers:**
+
+<!-- Info per person for what to focus on, or historical info to understand who have previously reviewed and coverage. Help them get context. -->
+
+**Reminder:**
+<!-- Things to remember to do before finalizing this PR. -->
+- [ ] Add entry in CHANGELOG.md <!-- Remove if not applicable. -->

.yamato/build-fbx-sdk-bindings.yml

@@ -0,0 +1,59 @@
+# Auto-generated by Recipe Engine, do not modify manually.
+
+# Build plugins - macos-12
+build_plugins_-_macos-12:
+  name: Build plugins - macos-12
+  agent:
+    image: package-ci/macos-12:default
+    type: Unity::VM::osx
+    flavor: m1.mac
+  commands:
+  - command: ./build_mac.sh
+  artifacts:
+    build:
+      paths:
+      - build-mac/install/**
+
+# Build plugins - ubuntu-22.04
+build_plugins_-_ubuntu-22_04:
+  name: Build plugins - ubuntu-22.04
+  agent:
+    image: package-ci/ubuntu-22.04:default
+    type: Unity::VM
+    flavor: b1.large
+  commands:
+  - command: ./build_linux.sh
+  artifacts:
+    build:
+      paths:
+      - build-ubuntu/install/**
+
+# Build plugins - win10
+build_plugins_-_win10:
+  name: Build plugins - win10
+  agent:
+    image: package-ci/win10:default
+    type: Unity::VM
+    flavor: b1.large
+  commands:
+  - command: build_win.cmd
+  artifacts:
+    build:
+      paths:
+      - build-win/install/**
+
+# Build plugins - win11-arm64
+build_plugins_-_win11-arm64:
+  name: Build plugins - win11-arm64
+  agent:
+    image: package-ci/win11-arm64:default
+    type: Unity::VM::Azure
+    flavor: b1.large
+    model: arm
+  commands:
+  - command: build_win.cmd
+  artifacts:
+    build:
+      paths:
+      - build-win/install/**
+

.yamato/code-signing.yml

@@ -0,0 +1,50 @@
+# Auto-generated by Recipe Engine, do not modify manually.
+
+# Sign binaries for Fbx on MacOS
+sign_binaries_for_fbx_on_macos:
+  name: Sign binaries for Fbx on MacOS
+  agent:
+    image: package-ci/macos-13:default
+    type: Unity::VM::osx
+    flavor: b1.xlarge
+  commands:
+  - brick_source: [email protected]:unity/[email protected]
+    variables:
+      CERTIFICATE_NAME: apple-developer-id-application-unity-technologies-sf
+  - command: |-
+      security unlock-keychain -p $UNITY_KEYCHAIN_PASSWORD /Users/$USER/Library/Keychains/login.keychain-db
+      codesign --verbose=3 --timestamp --options=runtime --sign "$(<certificate_thumbprint.txt)" build-mac/install/com.autodesk.fbx/Editor/Plugins/UnityFbxSdkNative.bundle
+      security lock-keychain /Users/$USER/Library/Keychains/login.keychain-db
+      codesign --verify --verbose build-mac/install/com.autodesk.fbx/Editor/Plugins/UnityFbxSdkNative.bundle
+    timeout: 2
+    retries: 3
+  artifacts:
+    Fbx_SignedBinariesOnMac:
+      paths:
+      - build-mac/install/com.autodesk.fbx/Editor/Plugins/UnityFbxSdkNative.bundle
+  dependencies:
+  - path: .yamato/build-fbx-sdk-bindings.yml#build_plugins_-_macos-12
+
+# Sign binaries for Fbx on Windows
+sign_binaries_for_fbx_on_windows:
+  name: Sign binaries for Fbx on Windows
+  agent:
+    image: package-ci/win10:default
+    type: Unity::VM
+    flavor: b1.large
+  commands:
+  - brick_source: [email protected]:unity/[email protected]
+    variables:
+      AZURE_VAULT_URI: https://unity-cs-kv-euw1-prd.vault.azure.net/
+      AZURE_CERTIFICATE: ev-unity-technologies-sf
+      FILE_LIST: windows_codesign_list.txt
+  - command: python Tools/Scripts/verify_win_executables_signed.py --architecture x64 --codesign-list-file windows_codesign_list.txt
+  artifacts:
+    Fbx_SignedBinariesOnWindows:
+      paths:
+      - build-win/install/com.autodesk.fbx/Editor/Plugins/WinX64/UnityFbxSdkNative.dll
+      - build-win/install/com.autodesk.fbx/Editor/Plugins/WinARM64/UnityFbxSdkNative.dll
+  dependencies:
+  - path: .yamato/build-fbx-sdk-bindings.yml#build_plugins_-_win10
+  - path: .yamato/build-fbx-sdk-bindings.yml#build_plugins_-_win11-arm64
+

.yamato/generated-scripts/infrastructure-instability-detection-linux.sh

@@ -0,0 +1,37 @@
+#!/bin/bash
+# This is an auto-generated script. Do not edit manually!
+set -x
+
+set -e
+if [ -f "infrastructure_instability_detection_standalone.zip" ]; then
+  echo "removed existing archive infrastructure_instability_detection_standalone.zip"
+  rm "infrastructure_instability_detection_standalone.zip" || true
+fi
+
+if [ -d "infrastructure_instability_detection_standalone" ]; then
+  echo "removed existing directory infrastructure_instability_detection_standalone/"
+  rm -rf "infrastructure_instability_detection_standalone" || true
+fi
+
+echo "downloading and extracting [email protected]"
+curl -fs "https://artifactory-slo.bf.unity3d.com/artifactory/automation-and-tooling/infrastructure-instability-detection/standalone/1.0.0/ubuntu.zip" --output "infrastructure_instability_detection_standalone.zip" --retry 5 || true
+
+if [ -d "infrastructure_instability_detection" ]; then
+  echo "removing infrastructure_instability_detection folder to avoid name clash"
+  rm -rf infrastructure_instability_detection/ || true
+fi
+
+unzip -qo "infrastructure_instability_detection_standalone.zip" && rm "infrastructure_instability_detection_standalone.zip" || true
+
+echo "downloading and extracting patterns"
+curl -fs "https://artifactory-slo.bf.unity3d.com/artifactory/automation-and-tooling/infrastructure-instability-detection/patterns.zip" --output patterns.zip --retry 5 || true
+
+if [ -d "patterns" ]; then
+  echo "removing patterns folder to avoid name clash"
+  rm -rf patterns/ || true
+fi
+
+unzip -q patterns.zip && rm patterns.zip || true
+
+echo "running '$(pwd)/infrastructure_instability_detection'"
+./infrastructure_instability_detection || true

.yamato/generated-scripts/infrastructure-instability-detection-mac.sh

@@ -0,0 +1,37 @@
+#!/bin/bash
+# This is an auto-generated script. Do not edit manually!
+set -x
+
+set -e
+if [ -f "infrastructure_instability_detection_standalone.zip" ]; then
+  echo "removed existing archive infrastructure_instability_detection_standalone.zip"
+  rm "infrastructure_instability_detection_standalone.zip" || true
+fi
+
+if [ -d "infrastructure_instability_detection_standalone" ]; then
+  echo "removed existing directory infrastructure_instability_detection_standalone/"
+  rm -rf "infrastructure_instability_detection_standalone" || true
+fi
+
+echo "downloading and extracting [email protected]"
+curl -fs "https://artifactory-slo.bf.unity3d.com/artifactory/automation-and-tooling/infrastructure-instability-detection/standalone/1.0.0/macos.zip" --output "infrastructure_instability_detection_standalone.zip" --retry 5 || true
+
+if [ -d "infrastructure_instability_detection" ]; then
+  echo "removing infrastructure_instability_detection folder to avoid name clash"
+  rm -rf infrastructure_instability_detection/ || true
+fi
+
+unzip -qo "infrastructure_instability_detection_standalone.zip" && rm "infrastructure_instability_detection_standalone.zip" || true
+
+echo "downloading and extracting patterns"
+curl -fs "https://artifactory-slo.bf.unity3d.com/artifactory/automation-and-tooling/infrastructure-instability-detection/patterns.zip" --output patterns.zip --retry 5 || true
+
+if [ -d "patterns" ]; then
+  echo "removing patterns folder to avoid name clash"
+  rm -rf patterns/ || true
+fi
+
+unzip -q patterns.zip && rm patterns.zip || true
+
+echo "running '$(pwd)/infrastructure_instability_detection'"
+./infrastructure_instability_detection || true

.yamato/generated-scripts/infrastructure-instability-detection-win.cmd

@@ -0,0 +1,12 @@
+@echo on
+rem This is an auto-generated script. Do not edit manually!
+
+if exist "%TEMP%\BugReporterCrashReportJson"  for /f "delims=" %%i in ('dir /b /a-d "%TEMP%\BugReporterCrashReportJson\*.json"') do curl -X POST  -H "Content-Type: application/json" -T "%TEMP%\BugReporterCrashReportJson\%%i" "https://internal-crash-collector.prd.cds.internal.unity3d.com/api/crash" || echo Failed to upload %%i. Ignoring...
+curl -fs "https://artifactory-slo.bf.unity3d.com/artifactory/automation-and-tooling/infrastructure-instability-detection/standalone/1.0.0/windows.zip" --output "infrastructure_instability_detection_standalone.zip" --retry 5
+IF EXIST "infrastructure_instability_detection" rmdir /s /q infrastructure_instability_detection
+powershell.exe -nologo -noprofile -command "& { Add-Type -A 'System.IO.Compression.FileSystem'; [IO.Compression.ZipFile]::ExtractToDirectory('infrastructure_instability_detection_standalone.zip', '.'); }" && DEL "infrastructure_instability_detection_standalone.zip"
+curl -fs "https://artifactory-slo.bf.unity3d.com/artifactory/automation-and-tooling/infrastructure-instability-detection/patterns.zip" --output patterns.zip --retry 5
+IF EXIST "patterns" rmdir /s /q patterns
+powershell.exe -nologo -noprofile -command "& { Add-Type -A 'System.IO.Compression.FileSystem'; [IO.Compression.ZipFile]::ExtractToDirectory('patterns.zip', '.'); }" && DEL "patterns.zip"
+infrastructure_instability_detection
+exit /b 0

.yamato/global.metafile

@@ -1,8 +1,10 @@
 editors:
   - version: 2020.3
-  - version: 2021.3
   - version: 2022.3
   - version: 6000.0
+  - version: 6000.2
+  - version: 6000.3
+  - version: 6000.4
   - version: trunk
 
 mac_platform: &mac
@@ -21,7 +23,7 @@ mac_arm64_platform: &mac_arm64
 ubuntu_platform: &ubuntu
   name: ubuntu
   type: Unity::VM
-  image: package-ci/ubuntu-20.04:v4
+  image: package-ci/ubuntu-22.04:v4
   flavor: b1.large
 
 win_platform: &win

.yamato/wrench/api-validation-jobs.yml

@@ -0,0 +1,62 @@
+# Auto-generated by Recipe Engine, do not modify manually.
+# This job is generated by the wrench recipe engine module, see find the docs here: http://Go/ii2fb
+all_api_validation_jobs:
+  name: All API Validation Jobs
+  dependencies:
+  - path: .yamato/wrench/api-validation-jobs.yml#api_validation_-_com_autodesk_fbx_-_2020_3_-_windows
+
+# upm-ci validation tests for API Validation - com.autodesk.fbx - 2020.3 - windows (2020.3 - Windows).
+api_validation_-_com_autodesk_fbx_-_2020_3_-_windows:
+  name: API Validation - com.autodesk.fbx - 2020.3 - windows
+  agent:
+    image: package-ci/win10:default
+    type: Unity::VM
+    flavor: b1.large
+  commands:
+  - command: curl https://artifactory.prd.it.unity3d.com/artifactory/stevedore-unity-internal/wrench-localapv/1-3-0_3978eda62a03e3dbc469ab77590d20f8832032d8e0b586550597b7f590baefec.zip -o wrench-localapv.zip
+  - command: 7z x -aoa wrench-localapv.zip
+  - command: pip install semver requests --index-url https://artifactory-slo.bf.unity3d.com/artifactory/api/pypi/pypi/simple
+  - command: python PythonScripts/print_machine_info.py
+  - command: npm install upm-ci-utils@stable -g --registry https://artifactory.prd.cds.internal.unity3d.com/artifactory/api/npm/upm-npm
+    timeout: 20
+    retries: 10
+  - command: unity-downloader-cli -u 2020.3 -c editor --path .Editor --fast
+    timeout: 10
+    retries: 3
+  - command: python PythonScripts/PackageJsonCondersor.py
+    timeout: 1
+    retries: 0
+  - command: upm-ci package test -u .Editor --package-path com.autodesk.fbx --type vetting-tests || exit 0
+    timeout: 30
+    retries: 0
+  - command: python PythonScripts/parse_upm_ci_results.py --package-path=com.autodesk.fbx
+    timeout: 2
+    retries: 0
+  after:
+  - command: .yamato\generated-scripts\infrastructure-instability-detection-win.cmd
+  artifacts:
+    Crash Dumps:
+      paths:
+      - CrashDumps/**
+    logs:
+      paths:
+      - '*.log'
+      - '*.xml'
+      - upm-ci~/test-results/**/*
+      - upm-ci~/temp/*/Logs/**
+      - upm-ci~/temp/*/Library/*.log
+      - upm-ci~/temp/*/*.log
+      - upm-ci~/temp/Builds/*.log
+      browsable: onNonSuccess
+  dependencies:
+  - path: .yamato/wrench/package-pack-jobs.yml#package_pack_-_com_autodesk_fbx
+  variables:
+    UNITY_LICENSING_SERVER_BASE_URL: http://unity-ci-licenses.hq.unity3d.com:8080/
+    UNITY_LICENSING_SERVER_DELETE_NUL: 0
+    UNITY_LICENSING_SERVER_DELETE_ULF: 0
+    UNITY_LICENSING_SERVER_TOOLSET: pro
+    UPMPVP_CONTEXT_WRENCH: 1.4.4.0
+  metadata:
+    Job Maintainers: '#rm-packageworks'
+    Wrench: 1.4.4.0
+

.yamato/wrench/package-pack-jobs.yml

@@ -0,0 +1,35 @@
+# Auto-generated by Recipe Engine, do not modify manually.
+# This job is generated by the wrench recipe engine module, see find the docs here: http://Go/ii2fb
+
+# Pack Autodesk FBX SDK for Unity
+package_pack_-_com_autodesk_fbx:
+  name: Package Pack - com.autodesk.fbx
+  agent:
+    image: package-ci/ubuntu-20.04:default
+    type: Unity::VM
+    flavor: b1.large
+  commands:
+  - command: npm install upm-ci-utils@stable -g --registry https://artifactory.prd.cds.internal.unity3d.com/artifactory/api/npm/upm-npm
+    timeout: 20
+    retries: 10
+  - command: cp -vrfp build-ubuntu/install/* .
+  - command: cp -vrfp build-mac/install/* .
+  - command: cp -vrfp build-win/install/* .
+  - command: upm-ci package pack --package-path com.autodesk.fbx
+  - command: cp upm-ci~/packages/packages.json upm-ci~/packages/com.autodesk.fbx_packages.json
+  after:
+  - command: bash .yamato/generated-scripts/infrastructure-instability-detection-linux.sh
+  artifacts:
+    packages:
+      paths:
+      - upm-ci~/packages/**/*
+  dependencies:
+  - path: .yamato/build-fbx-sdk-bindings.yml#build_plugins_-_ubuntu-22_04
+  - path: .yamato/code-signing.yml#sign_binaries_for_fbx_on_macos
+  - path: .yamato/code-signing.yml#sign_binaries_for_fbx_on_windows
+  variables:
+    UPMCI_ACK_LARGE_PACKAGE: 1
+  metadata:
+    Job Maintainers: '#rm-packageworks'
+    Wrench: 1.4.4.0
+