Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions EsrpSign.yml
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,17 @@ steps:
pageHash: ${{ parameters.pageHash }}
displayName: ${{ parameters.displayName }}

- ${{ if eq(parameters.certificateId , 'CP-460906') }}:
- template: template-compliance/authenticode-sign.yml
parameters:
buildOutputPath: ${{ parameters.buildOutputPath }}
signOutputPath: ${{ parameters.signOutputPath }}
pattern: ${{ parameters.pattern }}
certificateId: ${{ parameters.certificateId }}
verifySignature: ${{ parameters.verifySignature }}
pageHash: ${{ parameters.pageHash }}
displayName: ${{ parameters.displayName }}

- ${{ if eq(parameters.certificateId , 'CP-231522') }}:
- template: template-compliance/authenticode-sign.yml
parameters:
Expand Down
22 changes: 21 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,8 @@ The following sample shows how the templates can be included in your release YAM
1. Call the template from this repo in your yaml file and specify the values for the parameters.

```yaml
- template: assembly-module-compliance.yml@ComplianceRepo
- template: assembly-module-compliance.yml@C
- omplianceRepo
parameters:
# binskim
AnalyzeTarget: '$(Pipeline.Workspace)/*.dll'
Expand Down Expand Up @@ -196,6 +197,25 @@ For full features see: https://github.com/isaacs/minimatch#features
useMinimatch: true
```

### ESRP Authenticode preview certificate

This example signs `dll` and `psm1` files recursively and `psd1` files in the root of the `buildOutputPath`, using minimatch.

For full features see: https://github.com/isaacs/minimatch#features

```yaml
- template: EsrpSign.yml@ComplianceRepo
parameters:
buildOutputPath: $(signSrcPath)
signOutputPath: $(signOutPath)
certificateId: "CP-460906"
pattern: |
**\*.dll
*.psd1
**\*.psm1
useMinimatch: true
```

### ESRP RPM example

This example signs `dll` `psd1` and `psm1` files recursively, using minimatch.
Expand Down