Use correct signing certificates for RPM and DEBs (#21522)

PowerShell · Apr 23, 2024 · 2ea9f9f · 2ea9f9f
1 parent e34a143
commit 2ea9f9f
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 1 deletion.
diff --git a/.pipelines/PowerShell-Packages-Official.yml b/.pipelines/PowerShell-Packages-Official.yml
@@ -149,13 +149,15 @@ extends:
           signedDrop: 'drop_linux_sign_linux_fxd_x64_mariner'
           packageType: rpm-fxdependent  #mariner-x64
           jobName: mariner_x64
+          signingProfile: 'CP-459159-Pgp'
 
       - template: /.pipelines/templates/linux-package-build.yml@self
         parameters:
           unsignedDrop: 'drop_linux_build_linux_fxd_arm64_mariner'
           signedDrop: 'drop_linux_sign_linux_fxd_arm64_mariner'
           packageType: rpm-fxdependent-arm64 #mariner-arm64
           jobName: mariner_arm64
+          signingProfile: 'CP-459159-Pgp'
 
       - template: /.pipelines/templates/linux-package-build.yml@self
         parameters:

diff --git a/.pipelines/templates/linux-package-build.yml b/.pipelines/templates/linux-package-build.yml
@@ -3,6 +3,7 @@ parameters:
   signedeDrop: 'drop_linux_sign_linux_x64'
   packageType: deb
   jobName: 'deb'
+  signingProfile: 'CP-450779-Pgp'
 
 jobs:
 - job: ${{ parameters.jobName }}
@@ -35,6 +36,8 @@ jobs:
       value: $(Build.SourcesDirectory)/PowerShell/.config/tsaoptions.json
     - name: ob_sdl_credscan_suppressionsFile
       value: $(Build.SourcesDirectory)/PowerShell/.config/suppress.json
+    - name: SigningProfile
+      value: ${{ parameters.signingProfile }}
 
   steps:
   - checkout: self
@@ -162,7 +165,7 @@ jobs:
     displayName: Sign deb and rpm packages
     inputs:
       command: 'sign'
-      signing_profile: CP-459159-pgpdetached
+      signing_profile: '$(SigningProfile)'
       files_to_sign: '**/*.rpm;**/*.deb'
       search_root: '$(Pipeline.Workspace)'
 

diff --git a/.vsts-ci/linux.yml b/.vsts-ci/linux.yml
@@ -24,6 +24,7 @@ trigger:
     - .github/ISSUE_TEMPLATE/*
     - .github/workflows/*
     - .dependabot/config.yml
+    - .pipelines/*
     - test/perf/*
 pr:
   branches:
@@ -50,6 +51,7 @@ pr:
     - tools/releaseBuild/azureDevOps/templates/*
     - README.md
     - .spelling
+    - .pipelines/*
 
 variables:
   DOTNET_CLI_TELEMETRY_OPTOUT: 1

diff --git a/.vsts-ci/mac.yml b/.vsts-ci/mac.yml
@@ -16,6 +16,7 @@ trigger:
     - .github/ISSUE_TEMPLATE/*
     - .github/workflows/*
     - .dependabot/config.yml
+    - .pipelines/*
     - test/perf/*
 pr:
   branches:
@@ -42,6 +43,7 @@ pr:
     - tools/releaseBuild/azureDevOps/templates/*
     - README.md
     - .spelling
+    - .pipelines/*
 
 variables:
   DOTNET_CLI_TELEMETRY_OPTOUT: 1

diff --git a/.vsts-ci/windows.yml b/.vsts-ci/windows.yml
@@ -16,6 +16,7 @@ trigger:
     - .github/workflows/*
     - .dependabot/config.yml
     - test/perf/*
+    - .pipelines/*
 pr:
   branches:
     include:
@@ -39,6 +40,7 @@ pr:
     - tools/releaseBuild/azureDevOps/templates/*
     - README.md
     - .spelling
+    - .pipelines/*
 
 variables:
   GIT_CONFIG_PARAMETERS: "'core.autocrlf=false'"