Skip to content

Commit

Permalink
Update scope of codesign in daily build (Azure#25933)
Browse files Browse the repository at this point in the history
1. Enlarged the scope of dlls to sign - cover the new Storage.Common dll
2. Sign scripts as well
  • Loading branch information
isra-fel authored Aug 26, 2024
1 parent 197c61c commit b31611f
Showing 1 changed file with 39 additions and 9 deletions.
48 changes: 39 additions & 9 deletions .azure-pipelines/daily-build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -77,20 +77,15 @@ jobs:
arguments: 'build.proj /t:Build /p:Configuration=Release;TurnOnTestCoverage=true;ModifiedModuleBuild=true'

- task: EsrpCodeSigning@4
displayName: "Sign Dll [Authenticode + Strong Name]"
inputs:
ConnectedServiceName: '$(signServiceConnection)'
FolderPath: 'artifacts'
Pattern: |
Release/**/Microsoft*Azure*PowerShell*Cmdlets*.dll
Release/**/Microsoft.Azure.PowerShell.*.Sdk.dll
Release/**/Microsoft*Azure*PowerShell*.dll
Release/**/Az.*.private.dll
Release/**/Microsoft.Azure.PowerShell.AssemblyLoading.dll
Release/**/Microsoft.Azure.PowerShell.Authentication.dll
Release/**/Microsoft.Azure.PowerShell.Authentication.ResourceManager.dll
Release/**/Microsoft.Azure.PowerShell.Authenticators.dll
Release/**/Microsoft.Azure.PowerShell.AuthenticationAssemblyLoadContext.dll
Release/**/Microsoft.Azure.Commands.*.AlcWrapper.dll
!Release/**/Microsoft*Azure*PowerShell*Cmdlets*.Test.dll
InstallerChecks.dll
UseMinimatch: true
signConfigType: 'inlineSignParams'
inlineOperation: |
Expand Down Expand Up @@ -133,7 +128,42 @@ jobs:
SessionTimeout: '60'
MaxConcurrency: '50'
MaxRetryAttempts: '5'

- task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@4
displayName: "Sign Scripts [Authenticode]"
inputs:
ConnectedServiceName: '$(signServiceConnection)'
FolderPath: 'artifacts'
Pattern: |
Release/**/*.ps1
Release/**/*.psm1
Release/**/*.ps1xml
Release/**/*.js
InstallModule.ps1
UseMinimatch: true
signConfigType: inlineSignParams
inlineOperation: |
[
{
"KeyCode": "CP-230012",
"OperationCode": "SigntoolSign",
"Parameters": {
"OpusName": "Microsoft",
"OpusInfo": "http://www.microsoft.com",
"FileDigest": "/fd \"SHA256\"",
"PageHash": "/NPH",
"TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
},
"ToolName": "sign",
"ToolVersion": "1.0"
},
{
"KeyCode": "CP-230012",
"OperationCode": "SigntoolVerify",
"Parameters": {},
"ToolName": "sign",
"ToolVersion": "1.0"
}
]
- task: EsrpCodeSigning@4
displayName: 'Sign 3rd Party [Strong Name]'
inputs:
Expand Down

0 comments on commit b31611f

Please sign in to comment.