github/msft-calculator
1
0
Fork 0
mirror of https://github.com/Microsoft/calculator.git synced 2025-08-20 05:13:11 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Setup SBOM signing for VPack (#2133)

Browse source 
* setup SBOM signing for VPack

* yield output

* try get variable properly

* rename variable

* cap the name of output variable

* ready for review
This commit is contained in:
Tian L 2024-03-18 12:58:55 +09:00 • committed by GitHub
commit 15cd5bc5f4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 24 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
build/pipelines/templates/build-single-architecture.yaml
View file

@ -55,7 +55,7 @@ jobs:
downloadDirectory: $(Build.SourcesDirectory) downloadDirectory: $(Build.SourcesDirectory)
vstsFeed: WindowsInboxApps vstsFeed: WindowsInboxApps
vstsFeedPackage: calculator-internals vstsFeedPackage: calculator-internals
vstsPackageVersion: 0.0.105 vstsPackageVersion: 0.0.106
- task: NuGetToolInstaller@1 - task: NuGetToolInstaller@1
displayName: Use NuGet 6.x displayName: Use NuGet 6.x

2
build/pipelines/templates/package-msixbundle.yaml
View file

@ -91,7 +91,7 @@ jobs:
downloadDirectory: $(Build.SourcesDirectory) downloadDirectory: $(Build.SourcesDirectory)
vstsFeed: WindowsInboxApps vstsFeed: WindowsInboxApps
vstsFeedPackage: calculator-internals vstsFeedPackage: calculator-internals
vstsPackageVersion: 0.0.105 vstsPackageVersion: 0.0.106
- task: PowerShell@2 - task: PowerShell@2
displayName: Generate MsixBundle mapping displayName: Generate MsixBundle mapping

22
build/pipelines/templates/release-vpack.yaml
View file

@ -28,6 +28,23 @@ jobs:
contents: Microsoft.WindowsCalculator_8wekyb3d8bbwe.msixbundle contents: Microsoft.WindowsCalculator_8wekyb3d8bbwe.msixbundle
targetFolder: $(Pipeline.Workspace)\vpack\msixBundle targetFolder: $(Pipeline.Workspace)\vpack\msixBundle
- task: UniversalPackages@0
displayName: Download internals package
inputs:
command: download
downloadDirectory: $(Build.SourcesDirectory)
vstsFeed: WindowsInboxApps
vstsFeedPackage: calculator-internals
vstsPackageVersion: 0.0.106
- pwsh: |
$configPath = "$(Build.SourcesDirectory)\Tools\Build\Signing\ESRP-auth.json"
$auth = Get-Content -Raw $configPath | ConvertFrom-Json
$sbomKeyCode = $auth._ExtraContext.SbomKeyCode
echo $sbomKeyCode
echo "##vso[task.setvariable variable=SbomKeyCode]$sbomKeyCode"
displayName: Get SBOM Key Code
- task: PkgESVPack@12 - task: PkgESVPack@12
displayName: Create and push vpack for app displayName: Create and push vpack for app
env: env:
@ -39,3 +56,8 @@ jobs:
version: $(versionMajor).$(versionMinor).$(versionBuild) version: $(versionMajor).$(versionMinor).$(versionBuild)
owner: paxeeapps owner: paxeeapps
provData: true provData: true
taskLogVerbosity: Diagnostic
coseUsageScenario: 'product'
signSbom: true
sbomKeyCode: $(SbomKeyCode)
pathToEsrpAuthJson: '$(Build.SourcesDirectory)\Tools\Build\Signing\ESRP-auth.json'