@@ -12,7 +12,6 @@ stages:
1212 - job : Build
1313 pool :
1414 vmImage : windows-latest
15-
1615 variables :
1716 BuildConfiguration : Release
1817
@@ -50,48 +49,52 @@ stages:
5049 artifact : config
5150
5251- stage : CodeSign
52+ dependsOn : Build
5353 condition : and(succeeded('Build'), not(eq(variables['build.reason'], 'PullRequest')))
5454 jobs :
55- - deployment : CodeSign
55+ - job : CodeSign
5656 displayName : Code Signing
5757 pool :
5858 vmImage : windows-latest
59- environment : Code Sign
6059 variables :
6160 - group : Sign Client Credentials
62- strategy :
63- runOnce :
64- deploy :
65- steps :
66- - task : UseDotNet@2
67- displayName : ' Use .NET SDK 6.x'
68- inputs :
69- version : 6.x
7061
71- - task : DotNetCoreCLI@2
72- inputs :
73- command : custom
74- custom : tool
75- arguments : install --tool-path . sign --version 0.9.0-beta.23063.3
76- displayName : Install SignTool tool
62+ steps :
63+ - download : current
64+ artifact : config
65+
66+ - download : current
67+ artifact : BuildPackages
68+
69+ - task : UseDotNet@2
70+ displayName : ' Use .NET SDK 6.x'
71+ inputs :
72+ version : 6.x
73+
74+ - task : DotNetCoreCLI@2
75+ inputs :
76+ command : custom
77+ custom : tool
78+ arguments : install --tool-path . sign --version 0.9.0-beta.23063.3
79+ displayName : Install SignTool tool
7780
78- - pwsh : |
79- .\sign "code azure-key-vault" `
80- "**/*.nupkg" `
81- --timestamp-url "http://timestamp.digicert.com" `
82- --base-directory "$(Pipeline.Workspace)\BuildPackages" `
83- --file-list "$(Pipeline.Workspace)\config\filelist.txt" `
84- --publisher-name "CodeSignDemo" `
85- --description "CodeSignDemo" `
86- --description-url "https://github.com/novotnyllc/CodeSignDemo" `
87- --azure-key-vault-tenant-id "$(SignTenantId)" `
88- --azure-key-vault-client-id "$(SignClientId)" `
89- --azure-key-vault-certificate "$(SignClientId)" `
90- --azure-key-vault-client-secret '$(SignClientSecret)'
91- --azure-key-vault-certificate "$(SignKeyVaultCertificate)" `
92- --azure-key-vault-url "$(SignKeyVaultUrl)"
93- displayName: Sign packages
94-
95- - publish : $(Pipeline.Workspace)/BuildPackages
96- displayName : Publish Signed Packages
97- artifact : SignedPackages
81+ - pwsh : |
82+ .\sign "code azure-key-vault" `
83+ "**/*.nupkg" `
84+ --timestamp-url "http://timestamp.digicert.com" `
85+ --base-directory "$(Pipeline.Workspace)\BuildPackages" `
86+ --file-list "$(Pipeline.Workspace)\config\filelist.txt" `
87+ --publisher-name "CodeSignDemo" `
88+ --description "CodeSignDemo" `
89+ --description-url "https://github.com/novotnyllc/CodeSignDemo" `
90+ --azure-key-vault-tenant-id "$(SignTenantId)" `
91+ --azure-key-vault-client-id "$(SignClientId)" `
92+ --azure-key-vault-certificate "$(SignClientId)" `
93+ --azure-key-vault-client-secret '$(SignClientSecret)'
94+ --azure-key-vault-certificate "$(SignKeyVaultCertificate)" `
95+ --azure-key-vault-url "$(SignKeyVaultUrl)"
96+ displayName: Sign packages
97+
98+ - publish : $(Pipeline.Workspace)/BuildPackages
99+ displayName : Publish Signed Packages
100+ artifact : SignedPackages
0 commit comments