github/msft-calculator
1
0
Fork 0
mirror of https://github.com/Microsoft/calculator.git synced 2025-08-21 05:43:10 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

setup SBOM signing for VPack

Browse source
This commit is contained in:
Tian Liao 2024-03-15 13:14:47 +08:00
commit b17e635c81
4 changed files with 25 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
build/pipelines/azure-pipelines.release.yaml
View file

@ -8,7 +8,7 @@ trigger: none
pr: none
variables:
versionMajor: 11
versionMajor: 0 # Revert it back after passing tests
versionMinor: 2403
versionBuild: $[counter(format('{0}.{1}.*', variables['versionMajor'], variables['versionMinor']), 0)]
versionPatch: 0

2
build/pipelines/templates/build-single-architecture.yaml
View file

@ -55,7 +55,7 @@ jobs:
downloadDirectory: $(Build.SourcesDirectory)
vstsFeed: WindowsInboxApps
vstsFeedPackage: calculator-internals
vstsPackageVersion: 0.0.105
vstsPackageVersion: 0.0.106
- task: NuGetToolInstaller@1
displayName: Use NuGet 6.x

2
build/pipelines/templates/package-msixbundle.yaml
View file

@ -91,7 +91,7 @@ jobs:
downloadDirectory: $(Build.SourcesDirectory)
vstsFeed: WindowsInboxApps
vstsFeedPackage: calculator-internals
vstsPackageVersion: 0.0.105
vstsPackageVersion: 0.0.106
- task: PowerShell@2
displayName: Generate MsixBundle mapping

22
build/pipelines/templates/release-vpack.yaml
View file

@ -28,6 +28,23 @@ jobs:
contents: Microsoft.WindowsCalculator_8wekyb3d8bbwe.msixbundle
targetFolder: $(Pipeline.Workspace)\vpack\msixBundle
- task: UniversalPackages@0
displayName: Download internals package
inputs:
command: download
downloadDirectory: $(Build.SourcesDirectory)
vstsFeed: WindowsInboxApps
vstsFeedPackage: calculator-internals
vstsPackageVersion: 0.0.106
- pwsh: |
$configPath = "$(Build.SourcesDirectory)\Tools\Build\Signing\ESRP-auth.json"
$auth = Get-Content -Raw $configPath | ConvertFrom-Json
$sbomKeyCode = $auth._ExtraContext.SbomKeyCode
echo "##vso[task.setvariable variable=keyCode; isOutput=true]key code"
displayName: Get SBOM Key Code
name: getSbomKeyCode
- task: PkgESVPack@12
displayName: Create and push vpack for app
env:
@ -39,3 +56,8 @@ jobs:
version: $(versionMajor).$(versionMinor).$(versionBuild)
owner: paxeeapps
provData: true
taskLogVerbosity: Diagnostic
coseUsageScenario: 'product'
signSbom: true
sbomKeyCode: $(getSbomKeyCode.keyCode)
pathToEsrpAuthJson: '$(Build.SourcesDirectory)\Tools\Build\Signing\ESRP-auth.json'