Store-sign framework package in Pipeline

microsoft · Dec 3, 2021 · 71d4996 · 71d4996
1 parent 9341732
commit 71d4996
Show file tree

Hide file tree

Showing 2 changed files with 41 additions and 0 deletions.
diff --git a/build/AzurePipelinesTemplates/MUX-BuildDevProject-Steps.yml b/build/AzurePipelinesTemplates/MUX-BuildDevProject-Steps.yml
@@ -58,3 +58,4 @@ steps:
   - template: MUX-MakeFrameworkPackages-Steps.yml
     parameters:
       buildOutputDir: $(buildOutputDir)
+      signOutput: ${{parameters.signOutput}}
diff --git a/build/AzurePipelinesTemplates/MUX-MakeFrameworkPackages-Steps.yml b/build/AzurePipelinesTemplates/MUX-MakeFrameworkPackages-Steps.yml
@@ -1,5 +1,6 @@
 parameters:
   buildOutputDir: '$(Build.SourcesDirectory)\Artifacts\drop'
+  signOutput: false
 
 steps:
   - powershell: |
@@ -25,3 +26,42 @@ steps:
         }
       }
     displayName: 'Make FrameworkPackages'
+
+  - ${{ if eq( parameters.signOutput, true) }}:
+    - task: EsrpCodeSigning@1
+      displayName: First Party StoreSign Framework Package
+      inputs:
+        ConnectedServiceName: WinUISigning
+        FolderPath: '${{ parameters.buildOutputDir }}\$(buildConfiguration)\$(buildPlatform)\FrameworkPackage'
+        Pattern: |
+          *.appx
+        signConfigType: 'inlineSignParams'
+        inlineOperation: >-
+          [
+              {
+                  "KeyCode" : "Dynamic",
+                  "CertTemplateName" : "WINMSAPP1ST",
+                  "CertSubjectName" : "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US",
+                  "OperationCode" : "SigntoolSign",
+                  "Parameters" : {
+                      "OpusName" : "Microsoft",
+                      "OpusInfo" : "http://www.microsoft.com",
+                      "FileDigest" : "/fd \"SHA256\"",
+                      "TimeStamp" : "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
+                  },
+                  "ToolName" : "sign",
+                  "ToolVersion" : "1.0"
+              },
+              {
+                  "KeyCode" : "Dynamic",
+                  "CertTemplateName" : "WINMSAPP1ST",
+                  "CertSubjectName" : "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US",
+                  "OperationCode" : "SigntoolVerify",
+                  "Parameters" : {},
+                  "ToolName" : "sign",
+                  "ToolVersion" : "1.0"
+              }
+          ]
+        SessionTimeout: '60'
+        MaxConcurrency: '50'
+        MaxRetryAttempts: '5'