Skip to content

Replace certificate signing with Azure Trusted Signing for tags#651

Merged
andrzejskowronski merged 1 commit intosupport/validator-sdk5from
devops/setup-artifact-signing-for-sdk5
Mar 26, 2026
Merged

Replace certificate signing with Azure Trusted Signing for tags#651
andrzejskowronski merged 1 commit intosupport/validator-sdk5from
devops/setup-artifact-signing-for-sdk5

Conversation

@mmsmits
Copy link
Copy Markdown
Member

@mmsmits mmsmits commented Mar 26, 2026

This pull request updates the code signing configuration in the Azure Pipelines YAML file. The main change is a switch to a more secure and centralized code signing process that is only triggered for builds from version tags.

Pipeline configuration improvements:

  • Updated the code signing step to use Azure Trusted Signing with a certificate profile and service connection, instead of direct certificate and password variables. This new configuration is conditionally applied only when building from version tags, improving both security and maintainability.

@andrzejskowronski andrzejskowronski merged commit bf70c64 into support/validator-sdk5 Mar 26, 2026
2 checks passed
@andrzejskowronski andrzejskowronski deleted the devops/setup-artifact-signing-for-sdk5 branch March 26, 2026 12:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants