Skip to content

Commit 417ac89

Browse files
authored
[1ES] Update to identity based ESRP task. (#10193)
* Use sign-files.yml template * Update eng ref * Use eng sign-files template * Update sign template, revert eng ref * Revert displayName change
1 parent 72ae629 commit 417ac89

File tree

1 file changed

+18
-123
lines changed

1 file changed

+18
-123
lines changed

eng/ci/templates/official/jobs/build-artifacts-windows.yml

Lines changed: 18 additions & 123 deletions
Original file line numberDiff line numberDiff line change
@@ -71,36 +71,12 @@ jobs:
7171
**/ExtensionsMetadataGenerator.csproj
7272
**/WebJobs.Script.Abstractions.csproj
7373
74-
- task: EsrpCodeSigning@2
75-
displayName: Sign Abstractions assemblies
76-
inputs:
77-
ConnectedServiceName: ESRP Service-internal
78-
FolderPath: out/bin/WebJobs.Script.Abstractions/release
79-
Pattern: Microsoft.Azure.WebJobs.Script.Abstractions*.dll
80-
signConfigType: inlineSignParams
81-
inlineOperation: |
82-
[
83-
{
84-
"KeyCode": "CP-230012",
85-
"OperationCode": "SigntoolSign",
86-
"Parameters": {
87-
"OpusName": "Microsoft",
88-
"OpusInfo": "http://www.microsoft.com",
89-
"FileDigest": "/fd \"SHA256\"",
90-
"PageHash": "/NPH",
91-
"TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
92-
},
93-
"ToolName": "sign",
94-
"ToolVersion": "1.0"
95-
},
96-
{
97-
"KeyCode": "CP-230012",
98-
"OperationCode": "SigntoolVerify",
99-
"Parameters": {},
100-
"ToolName": "sign",
101-
"ToolVersion": "1.0"
102-
}
103-
]
74+
- template: ci/sign-files.yml@eng
75+
parameters:
76+
displayName: Sign Abstractions assemblies
77+
folderPath: out/bin/WebJobs.Script.Abstractions/release
78+
pattern: Microsoft.Azure.WebJobs.Script.Abstractions*.dll
79+
signType: dll
10480

10581
- task: DeleteFiles@1
10682
displayName: Delete CodeSignSummary files
@@ -116,75 +92,12 @@ jobs:
11692
projects: |
11793
**/WebJobs.Script.Abstractions.csproj
11894
119-
- task: EsrpCodeSigning@2
120-
displayName: Sign Abstractions package
121-
inputs:
122-
ConnectedServiceName: ESRP Service-internal
123-
FolderPath: out/pkg/release
124-
Pattern: Microsoft.Azure.WebJobs.Script.Abstractions*.nupkg
125-
signConfigType: inlineSignParams
126-
inlineOperation: |
127-
[
128-
{
129-
"KeyCode": "CP-401405",
130-
"OperationCode": "NuGetSign",
131-
"Parameters": {},
132-
"ToolName": "sign",
133-
"ToolVersion": "1.0"
134-
},
135-
{
136-
"KeyCode": "CP-401405",
137-
"OperationCode": "NuGetVerify",
138-
"Parameters": {},
139-
"ToolName": "sign",
140-
"ToolVersion": "1.0"
141-
}
142-
]
143-
144-
- task: EsrpCodeSigning@2
145-
displayName: Sign ExtensionsMetadataGenerator assemblies
146-
inputs:
147-
ConnectedServiceName: ESRP Service-internal
148-
FolderPath: out/bin/ExtensionsMetadataGenerator
149-
Pattern: Microsoft.Azure.WebJobs.Script.ExtensionsMetadataGenerator*.dll
150-
signConfigType: inlineSignParams
151-
inlineOperation: |
152-
[
153-
{
154-
"KeyCode" : "CP-233863-SN",
155-
"OperationCode" : "StrongNameSign",
156-
"Parameters" : {},
157-
"ToolName" : "sign",
158-
"ToolVersion" : "1.0"
159-
},
160-
{
161-
"KeyCode" : "CP-233863-SN",
162-
"OperationCode" : "StrongNameVerify",
163-
"Parameters" : {},
164-
"ToolName" : "sign",
165-
"ToolVersion" : "1.0"
166-
},
167-
{
168-
"KeyCode": "CP-230012",
169-
"OperationCode": "SigntoolSign",
170-
"Parameters": {
171-
"OpusName": "Microsoft",
172-
"OpusInfo": "http://www.microsoft.com",
173-
"FileDigest": "/fd \"SHA256\"",
174-
"PageHash": "/NPH",
175-
"TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
176-
},
177-
"ToolName": "sign",
178-
"ToolVersion": "1.0"
179-
},
180-
{
181-
"KeyCode": "CP-230012",
182-
"OperationCode": "SigntoolVerify",
183-
"Parameters": {},
184-
"ToolName": "sign",
185-
"ToolVersion": "1.0"
186-
}
187-
]
95+
- template: ci/sign-files.yml@eng
96+
parameters:
97+
displayName: Sign ExtensionsMetadataGenerator assemblies
98+
folderPath: out/bin/ExtensionsMetadataGenerator
99+
pattern: Microsoft.Azure.WebJobs.Script.ExtensionsMetadataGenerator*.dll
100+
signType: dll-strong-name
188101

189102
- task: DeleteFiles@1
190103
displayName: Delete CodeSignSummary files
@@ -200,30 +113,12 @@ jobs:
200113
projects: |
201114
**/ExtensionsMetadataGenerator.csproj
202115
203-
- task: EsrpCodeSigning@2
204-
displayName: Sign ExtensionsMetadataGenerator package
205-
inputs:
206-
ConnectedServiceName: ESRP Service-internal
207-
FolderPath: out/pkg/release
208-
Pattern: Microsoft.Azure.WebJobs.Script.ExtensionsMetadataGenerator*.nupkg
209-
signConfigType: inlineSignParams
210-
inlineOperation: |
211-
[
212-
{
213-
"KeyCode": "CP-401405",
214-
"OperationCode": "NuGetSign",
215-
"Parameters": {},
216-
"ToolName": "sign",
217-
"ToolVersion": "1.0"
218-
},
219-
{
220-
"KeyCode": "CP-401405",
221-
"OperationCode": "NuGetVerify",
222-
"Parameters": {},
223-
"ToolName": "sign",
224-
"ToolVersion": "1.0"
225-
}
226-
]
116+
- template: ci/sign-files.yml@eng
117+
parameters:
118+
displayName: Sign NugetPackages
119+
folderPath: out/pkg/release
120+
pattern: '*.nupkg'
121+
signType: nuget
227122

228123
- task: DeleteFiles@1
229124
displayName: Delete CodeSignSummary files

0 commit comments

Comments
 (0)