Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
microsoft
GitHub Repository: microsoft/vscode
 Path: blob/main/build/azure-pipelines/cli/cli-win32-sign.yml
3520 views
1
parameters:

2
  - name: VSCODE_CLI_ARTIFACTS

3
    type: object

4
    default: []

5


6
steps:

7
  - task: UseDotNet@2

8
    inputs:

9
      version: 6.x

10


11
  - task: EsrpCodeSigning@5

12
    inputs:

13
      UseMSIAuthentication: true

14
      ConnectedServiceName: vscode-esrp

15
      AppRegistrationClientId: $(ESRP_CLIENT_ID)

16
      AppRegistrationTenantId: $(ESRP_TENANT_ID)

17
      AuthAKVName: vscode-esrp

18
      AuthSignCertName: esrp-sign

19
      FolderPath: .

20
      Pattern: noop

21
    displayName: 'Install ESRP Tooling'

22


23
  - powershell: |

24
      . build/azure-pipelines/win32/exec.ps1

25
      $ErrorActionPreference = "Stop"

26
      $EsrpCodeSigningTool = (gci -directory -filter EsrpCodeSigning_* $(Agent.RootDirectory)\_tasks | Select-Object -last 1).FullName

27
      $Version = (gci -directory $EsrpCodeSigningTool | Select-Object -last 1).FullName

28
      echo "##vso[task.setvariable variable=EsrpCliDllPath]$Version\net6.0\esrpcli.dll"

29
    displayName: Find ESRP CLI

30


31
  - ${{ each target in parameters.VSCODE_CLI_ARTIFACTS }}:

32
      - task: DownloadPipelineArtifact@2

33
        displayName: Download artifact

34
        inputs:

35
          artifact: ${{ target }}

36
          path: $(Build.BinariesDirectory)/pkg/${{ target }}

37


38
      - task: ExtractFiles@1

39
        displayName: Extract artifact

40
        inputs:

41
          archiveFilePatterns: $(Build.BinariesDirectory)/pkg/${{ target }}/*.zip

42
          destinationFolder: $(Build.BinariesDirectory)/sign/${{ target }}

43


44
  - powershell: node build\azure-pipelines\common\sign $env:EsrpCliDllPath sign-windows $(Build.BinariesDirectory)/sign "*.exe"

45
    env:

46
      SYSTEM_ACCESSTOKEN: $(System.AccessToken)

47
    displayName: ✍️ Codesign

48


49
  - ${{ each target in parameters.VSCODE_CLI_ARTIFACTS }}:

50
      - powershell: |

51
          $ASSET_ID = "${{ target }}".replace("unsigned_", "");

52
          echo "##vso[task.setvariable variable=ASSET_ID]$ASSET_ID"

53
        displayName: Set asset id variable

54


55
      - task: ArchiveFiles@2

56
        displayName: Archive signed files

57
        inputs:

58
          rootFolderOrFile: $(Build.BinariesDirectory)/sign/${{ target }}

59
          includeRootFolder: false

60
          archiveType: zip

61
          archiveFile: $(Build.ArtifactStagingDirectory)/$(ASSET_ID).zip

62


63