Merge branch 'main' into main

Author: vcsjones

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "nuget"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    ignore:
+      - dependency-name: "System.*"
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "Microsoft.Extensions.*"
+        update-types: ["version-update:semver-major"]

.github/workflows/codeql.yml

@@ -0,0 +1,42 @@
+name: "CodeQL Advanced"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  schedule:
+    - cron: '41 5 * * 4'
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: 'ubuntu-latest'
+    permissions:
+      security-events: write
+      packages: read
+      actions: read
+      contents: read
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - language: actions
+          build-mode: none
+        - language: csharp
+          build-mode: autobuild
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v5
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: ${{ matrix.build-mode }}
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

.github/workflows/pr.yml

@@ -13,7 +13,7 @@ jobs:
         os: ['windows-latest', 'windows-11-arm']
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       name: Checkout
     - uses: actions/setup-dotnet@v4
       with:
@@ -23,7 +23,7 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       name: Checkout
     - uses: actions/dependency-review-action@v4
       name: Dependency Review

Directory.Packages.props

@@ -1,21 +1,21 @@
 <Project>
   <ItemGroup>
-    <PackageVersion Include="Azure.Identity" Version="1.13.1" />
-    <PackageVersion Include="Azure.Security.KeyVault.Certificates" Version="4.7.0" />
-    <PackageVersion Include="Azure.Security.KeyVault.Keys" Version="4.7.0" />
+    <PackageVersion Include="Azure.Identity" Version="1.14.2" />
+    <PackageVersion Include="Azure.Security.KeyVault.Certificates" Version="4.8.0" />
+    <PackageVersion Include="Azure.Security.KeyVault.Keys" Version="4.8.0" />
     <PackageVersion Include="Microsoft.Extensions.FileSystemGlobbing" Version="8.0.0" />
     <PackageVersion Include="Microsoft.Extensions.Logging" Version="8.0.1" />
     <PackageVersion Include="Microsoft.Extensions.Logging.Console" Version="8.0.1" />
 
     <PackageVersion Include="System.Net.Http" Version="4.3.4" />
-    <PackageVersion Include="System.Text.Json" Version="8.0.5" />
+    <PackageVersion Include="System.Text.Json" Version="8.0.6" />
     <PackageVersion Include="System.Text.RegularExpressions" Version="4.3.1" />
 
     <PackageVersion Include="XenoAtom.CommandLine" Version="1.0.1" />
     <PackageVersion Include="MinVer" Version="6.0.0" />
 
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.12.0" />
-    <PackageVersion Include="xunit.v3" Version="1.0.0" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="3.0.0" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageVersion Include="xunit.v3" Version="3.0.0" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.3" />
   </ItemGroup>
 </Project>

SUPPORT.md

@@ -0,0 +1,5 @@
+AzureSignTool is supported on an "as-is" basis per the associated [LICENSE]. Support is provided through GitHub issues only.
+
+AzureSignTool is not an official Microsoft product, and nor is it a supported under any Microsoft support aggreements.
+
+[LICENSE]: LICENSE

WALKTHROUGH.md

@@ -23,9 +23,9 @@ The following basic preparations are required for all guides:
 
   | Area | Permissions |
   | ---- | ----------- |
-  | Key | Verify, Sign, Get, List |
-  | Secret | Get, List |
-  | Certificate | Get, List |
+  | Key | Sign |
+  | Secret | Get |
+  | Certificate | Get |
 
 * In your Azure DevOps build configuration, add a step to install the global tool:
 
@@ -64,9 +64,9 @@ The following basic preparations are required for all guides:
 
   | Area | Permissions |
   | ---- | ----------- |
-  | Key | Verify, Sign, Get, List |
-  | Secret | Get, List |
-  | Certificate | Get, List |
+  | Key | Sign |
+  | Secret | Get |
+  | Certificate | Get |
 
 * In your Azure DevOps build configuration, add a step to install the global tool:
 
@@ -98,9 +98,9 @@ The following basic preparations are required for all guides:
 
   | Area | Permissions |
   | ---- | ----------- |
-  | Key | Verify, Sign, Get, List |
-  | Secret | Get, List |
-  | Certificate | Get, List |
+  | Key | Sign |
+  | Secret | Get |
+  | Certificate | Get |
 
 * In your GitLab build configuration, add a job to install and execute the AzureSignTool:
 
@@ -134,9 +134,9 @@ sign:
 
   | Area | Permissions |
   | ---- | ----------- |
-  | Key | Verify, Sign, Get, List |
-  | Secret | Get, List |
-  | Certificate | Get, List |
+  | Key | Sign |
+  | Secret | Get |
+  | Certificate | Get |
 
 
 * In your GitLab build configuration, add a step to install and execute the AzureSignTool: