mirror of
https://github.com/PowerShell/PowerShell
synced 2026-06-08 12:12:50 +00:00
Add build to vPack Pipeline (#25915)
Co-authored-by: Travis Plunk (HE/HIM) <tplunk@ntdev.microsoft.com> Co-authored-by: Travis Plunk <travis.plunk@microsoft.com>
This commit is contained in:
co-authored by
Travis Plunk
Travis Plunk
parent
1e46d89c63
commit
499cedfaf6
@@ -887,7 +887,8 @@ function Update-PSSignedBuildFolder
|
||||
[string]$BuildPath,
|
||||
[Parameter(Mandatory)]
|
||||
[string]$SignedFilesPath,
|
||||
[string[]] $RemoveFilter = ('*.pdb', '*.zip', '*.r2rmap')
|
||||
[string[]] $RemoveFilter = ('*.pdb', '*.zip', '*.r2rmap'),
|
||||
[bool]$OfficialBuild = $true
|
||||
)
|
||||
|
||||
$BuildPathNormalized = (Get-Item $BuildPath).FullName
|
||||
@@ -943,8 +944,21 @@ function Update-PSSignedBuildFolder
|
||||
if ($IsWindows)
|
||||
{
|
||||
$signature = Get-AuthenticodeSignature -FilePath $signedFilePath
|
||||
if ($signature.Status -ne 'Valid') {
|
||||
|
||||
if ($signature.Status -ne 'Valid' -and $OfficialBuild) {
|
||||
Write-Host "Certificate Issuer: $($signature.SignerCertificate.Issuer)"
|
||||
Write-Host "Certificate Subject: $($signature.SignerCertificate.Subject)"
|
||||
Write-Error "Invalid signature for $signedFilePath"
|
||||
} elseif ($OfficialBuild -eq $false) {
|
||||
if ($signature.Status -eq 'NotSigned') {
|
||||
Write-Warning "File is not signed: $signedFilePath"
|
||||
} elseif ($signature.SignerCertificate.Issuer -notmatch '^CN=(Microsoft|TestAzureEngBuildCodeSign|Windows Internal Build Tools).*') {
|
||||
Write-Warning "File signed with test certificate: $signedFilePath"
|
||||
Write-Host "Certificate Issuer: $($signature.SignerCertificate.Issuer)"
|
||||
Write-Host "Certificate Subject: $($signature.SignerCertificate.Subject)"
|
||||
} else {
|
||||
Write-Verbose -Verbose "File properly signed: $signedFilePath"
|
||||
}
|
||||
}
|
||||
}
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user