Pipe signing conditions, and disable signing in runtime lab

eng/pipelines/official/jobs/prepare-signed-artifacts.yml

@@ -8,6 +8,7 @@ jobs:
   parameters:
     name: 'PrepareSignedArtifacts'
     displayName: 'Prepare Signed Artifacts'
+    microbuildUseESRP: ${{ parameters.isOfficialBuild }}
 
     pool:
       name: $(DncEngInternalBuildPool)
@@ -22,9 +23,13 @@ jobs:
     enableMicrobuild: true
 
     variables:
+    - ${{ if eq(parameters.isOfficialBuild, true) }}:
       - name: '_SignType'
         value: $[ coalesce(variables.OfficialSignType, 'real') ]
-
+    - ${{ else }}:
+      - name: '_SignType'
+        value: $[ coalesce(variables.OfficialSignType, 'test') ]
+
     templateContext:
       inputs:
       - input: checkout
@@ -40,7 +45,7 @@ jobs:
         condition: succeededOrFailed()
         targetPath: '$(Build.StagingDirectory)\BuildLogs'
         artifactName: ${{ parameters.logArtifactName }}
-    
+
     steps:
     - script: >-
         build.cmd -restore -sign -publish -ci -configuration Release
@@ -53,7 +58,7 @@ jobs:
         /p:DotNetPublishUsingPipelines=true
         /bl:$(Build.SourcesDirectory)\prepare-artifacts.binlog
       displayName: Prepare artifacts and upload to build
-    
+
     - task: CopyFiles@2
       displayName: Copy Files to $(Build.StagingDirectory)\BuildLogs
       inputs:
@@ -63,4 +68,4 @@ jobs:
           **/*.binlog
         TargetFolder: '$(Build.StagingDirectory)\BuildLogs'
       continueOnError: true
-      condition: succeededOrFailed()
+      condition: succeededOrFailed()

eng/pipelines/official/stages/publish.yml

@@ -1,5 +1,6 @@
 parameters:
   PublishRidAgnosticPackagesFromPlatform: Browser_wasm_win
+  isOfficialBuild: true
 
 stages:
 
@@ -12,6 +13,7 @@ stages:
   - template: /eng/pipelines/official/jobs/prepare-signed-artifacts.yml
     parameters:
       PublishRidAgnosticPackagesFromPlatform: ${{ parameters.PublishRidAgnosticPackagesFromPlatform }}
+      isOfficialBuild: ${{ parameters.isOfficialBuild }}
 
   # Publish to Build Asset Registry in order to generate the ReleaseConfigs artifact.
   - template: /eng/common/templates-official/job/publish-build-assets.yml

eng/pipelines/runtimelab-official.yml

@@ -54,4 +54,4 @@ extends:
                 librariesConfiguration: Release
     - template: /eng/pipelines/official/stages/publish.yml
       parameters:
-        isOfficialBuild: true
+        isOfficialBuild: false