Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve Post-Build Signing Validation in the VMR #47744

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ellahathaway
Copy link
Member

@ellahathaway ellahathaway commented Mar 19, 2025

Related to dotnet/source-build#4068

This PR removes the current post-build signing validation in the VMR and replaces it with logic written in C#. This change results in the following improvements to the existing signing validation in the VMR:

  • Only shipping assets are checked. Previously, all packages/blobs were checked for signing regardless of shipping status.
  • The verification output only includes unsigned files. Previously, containers were always written to the console, regardless of their signing status.

Waiting on a fully signed build before I publish this PR. It's also likely that this cannot be published until there is a rebootstrap that includes an Arcade SDK with my recent SignCheck changes.

@dotnet-issue-labeler dotnet-issue-labeler bot added Area-Infrastructure untriaged Request triage from a team member labels Mar 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area-Infrastructure untriaged Request triage from a team member
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant