Skip to content

Commit b31611f

Browse files
authored
Update scope of codesign in daily build (#25933)
1. Enlarged the scope of dlls to sign - cover the new Storage.Common dll 2. Sign scripts as well
1 parent 197c61c commit b31611f

File tree

1 file changed

+39
-9
lines changed

1 file changed

+39
-9
lines changed

.azure-pipelines/daily-build.yml

Lines changed: 39 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -77,20 +77,15 @@ jobs:
7777
arguments: 'build.proj /t:Build /p:Configuration=Release;TurnOnTestCoverage=true;ModifiedModuleBuild=true'
7878

7979
- task: EsrpCodeSigning@4
80+
displayName: "Sign Dll [Authenticode + Strong Name]"
8081
inputs:
8182
ConnectedServiceName: '$(signServiceConnection)'
8283
FolderPath: 'artifacts'
8384
Pattern: |
84-
Release/**/Microsoft*Azure*PowerShell*Cmdlets*.dll
85-
Release/**/Microsoft.Azure.PowerShell.*.Sdk.dll
85+
Release/**/Microsoft*Azure*PowerShell*.dll
8686
Release/**/Az.*.private.dll
87-
Release/**/Microsoft.Azure.PowerShell.AssemblyLoading.dll
88-
Release/**/Microsoft.Azure.PowerShell.Authentication.dll
89-
Release/**/Microsoft.Azure.PowerShell.Authentication.ResourceManager.dll
90-
Release/**/Microsoft.Azure.PowerShell.Authenticators.dll
91-
Release/**/Microsoft.Azure.PowerShell.AuthenticationAssemblyLoadContext.dll
9287
Release/**/Microsoft.Azure.Commands.*.AlcWrapper.dll
93-
!Release/**/Microsoft*Azure*PowerShell*Cmdlets*.Test.dll
88+
InstallerChecks.dll
9489
UseMinimatch: true
9590
signConfigType: 'inlineSignParams'
9691
inlineOperation: |
@@ -133,7 +128,42 @@ jobs:
133128
SessionTimeout: '60'
134129
MaxConcurrency: '50'
135130
MaxRetryAttempts: '5'
136-
131+
- task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@4
132+
displayName: "Sign Scripts [Authenticode]"
133+
inputs:
134+
ConnectedServiceName: '$(signServiceConnection)'
135+
FolderPath: 'artifacts'
136+
Pattern: |
137+
Release/**/*.ps1
138+
Release/**/*.psm1
139+
Release/**/*.ps1xml
140+
Release/**/*.js
141+
InstallModule.ps1
142+
UseMinimatch: true
143+
signConfigType: inlineSignParams
144+
inlineOperation: |
145+
[
146+
{
147+
"KeyCode": "CP-230012",
148+
"OperationCode": "SigntoolSign",
149+
"Parameters": {
150+
"OpusName": "Microsoft",
151+
"OpusInfo": "http://www.microsoft.com",
152+
"FileDigest": "/fd \"SHA256\"",
153+
"PageHash": "/NPH",
154+
"TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
155+
},
156+
"ToolName": "sign",
157+
"ToolVersion": "1.0"
158+
},
159+
{
160+
"KeyCode": "CP-230012",
161+
"OperationCode": "SigntoolVerify",
162+
"Parameters": {},
163+
"ToolName": "sign",
164+
"ToolVersion": "1.0"
165+
}
166+
]
137167
- task: EsrpCodeSigning@4
138168
displayName: 'Sign 3rd Party [Strong Name]'
139169
inputs:

0 commit comments

Comments
 (0)