[release/13.2] Fix signing for aspire-managed bundle payload#16211
Merged
joperezr merged 1 commit intorelease/13.2from Apr 15, 2026
Merged
[release/13.2] Fix signing for aspire-managed bundle payload#16211joperezr merged 1 commit intorelease/13.2from
joperezr merged 1 commit intorelease/13.2from
Conversation
Split the bundle payload pipeline step into three phases so that aspire-managed goes through Arcade's signing infrastructure before CreateLayout packs it into the bundle archive: 1. dotnet publish - produces the self-contained single-file binary 2. build.cmd/sh -restore -sign - Arcade signs it via ItemsToSign 3. Bundle.proj /t:_RestoreDcpPackage;_RunCreateLayout - creates the tar.gz archive with the already-signed binary Changes: - eng/Signing.props: Add FileSignInfo and ItemsToSign entries for aspire-managed.exe (Windows) and aspire-managed (Linux/macOS) - eng/pipelines/templates/BuildAndTest.yml: Split bundle payload step into publish, sign, and layout steps per RID - eng/pipelines/templates/build_sign_native.yml: Same restructuring for macOS/Linux native stage (sign step conditional on codeSign) Fixes #15989 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
|
🚀 Dogfood this PR with:
curl -fsSL https://raw.githubusercontent.com/microsoft/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 16211Or
iex "& { $(irm https://raw.githubusercontent.com/microsoft/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 16211" |
joperezr
approved these changes
Apr 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of #16016 to release/13.2
/cc @joperezr
Customer Impact
Testing
Risk
Regression?