Add build to vPack Pipeline (#25915)

Co-authored-by: Travis Plunk (HE/HIM) <tplunk@ntdev.microsoft.com>
Co-authored-by: Travis Plunk <travis.plunk@microsoft.com>
This commit is contained in:
Justin Chung
2025-09-03 14:13:58 -07:00
committed by GitHub
co-authored by Travis Plunk Travis Plunk
parent 1e46d89c63
commit 499cedfaf6
3 changed files with 229 additions and 97 deletions
+16 -2
View File
@@ -887,7 +887,8 @@ function Update-PSSignedBuildFolder
[string]$BuildPath,
[Parameter(Mandatory)]
[string]$SignedFilesPath,
[string[]] $RemoveFilter = ('*.pdb', '*.zip', '*.r2rmap')
[string[]] $RemoveFilter = ('*.pdb', '*.zip', '*.r2rmap'),
[bool]$OfficialBuild = $true
)
$BuildPathNormalized = (Get-Item $BuildPath).FullName
@@ -943,8 +944,21 @@ function Update-PSSignedBuildFolder
if ($IsWindows)
{
$signature = Get-AuthenticodeSignature -FilePath $signedFilePath
if ($signature.Status -ne 'Valid') {
if ($signature.Status -ne 'Valid' -and $OfficialBuild) {
Write-Host "Certificate Issuer: $($signature.SignerCertificate.Issuer)"
Write-Host "Certificate Subject: $($signature.SignerCertificate.Subject)"
Write-Error "Invalid signature for $signedFilePath"
} elseif ($OfficialBuild -eq $false) {
if ($signature.Status -eq 'NotSigned') {
Write-Warning "File is not signed: $signedFilePath"
} elseif ($signature.SignerCertificate.Issuer -notmatch '^CN=(Microsoft|TestAzureEngBuildCodeSign|Windows Internal Build Tools).*') {
Write-Warning "File signed with test certificate: $signedFilePath"
Write-Host "Certificate Issuer: $($signature.SignerCertificate.Issuer)"
Write-Host "Certificate Subject: $($signature.SignerCertificate.Subject)"
} else {
Write-Verbose -Verbose "File properly signed: $signedFilePath"
}
}
}
else