Skip to content

Add release workflow signing split#26

Open
Marc-André Moreau (mamoreau-devolutions) wants to merge 1 commit into
masterfrom
azure-signing-workflows
Open

Add release workflow signing split#26
Marc-André Moreau (mamoreau-devolutions) wants to merge 1 commit into
masterfrom
azure-signing-workflows

Conversation

@mamoreau-devolutions

Copy link
Copy Markdown
Contributor

Summary

  • sign Windows psign artifacts with the workflow-built Linux psign-tool through Azure Trusted Signing
  • keep Devolutions.Psign module payload signing on the workflow-built module through Azure Key Vault
  • use the resolved publish environment for production vs test signing configuration while preserving existing preflight environment logic

Validation

  • git diff --check
  • YAML parse of .github/workflows/release.yml

Sign psign release binaries with the workflow-built psign-tool through Azure Trusted Signing, while keeping Devolutions.Psign module signing on the workflow-built module through Azure Key Vault.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant