Skip to content

Add release workflow signing split#26

Merged
Marc-André Moreau (mamoreau-devolutions) merged 1 commit into
masterfrom
azure-signing-workflows
Jun 29, 2026
Merged

Add release workflow signing split#26
Marc-André Moreau (mamoreau-devolutions) merged 1 commit into
masterfrom
azure-signing-workflows

Conversation

@mamoreau-devolutions

Copy link
Copy Markdown
Contributor

Summary

  • sign Windows psign artifacts with the workflow-built Linux psign-tool through Azure Trusted Signing
  • keep Devolutions.Psign module payload signing on the workflow-built module through Azure Key Vault
  • use the resolved publish environment for production vs test signing configuration while preserving existing preflight environment logic

Validation

  • git diff --check
  • YAML parse of .github/workflows/release.yml

Sign psign release binaries with the workflow-built psign-tool through Azure Trusted Signing, while keeping Devolutions.Psign module signing on the workflow-built module through Azure Key Vault.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@mamoreau-devolutions Marc-André Moreau (mamoreau-devolutions) merged commit 9dc23d2 into master Jun 29, 2026
49 checks passed
@mamoreau-devolutions Marc-André Moreau (mamoreau-devolutions) deleted the azure-signing-workflows branch June 29, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants