Azure / azure-dev

A developer CLI that reduces the time it takes for you to get started on Azure. The Azure Developer CLI (azd) provides a set of developer-friendly commands that map to key stages in your workflow - code, build, deploy, monitor, repeat.
https://aka.ms/azd
MIT License
416 stars 204 forks source link

[Do not merge] vscode signing #4533

Open danieljurek opened 2 weeks ago

danieljurek commented 2 weeks ago

DO NOT MERGE UNTIL 1es-redirect.yml is reverted

Uses vsce to prepare extension for signing and signs using ESRP.

Signature verification example:

> vsce verify-signature --packagePath E:\temp\vsix-sign\vsix-4\azure-dev-0.9.0-alpha.1.vsix --manifestPath E:\temp\vsix-sign\vsix-4\azure-dev-0.9.0-alpha.1.manifest --signaturePath E:\temp\vsix-sign\vsix-4\azure-dev-0.9.0-alpha.1.signature.p7s
Signature verification result: Success
Package file size:  722521
Signature archive file size:  9075
Manifest file size:  2644
Signature file size:  10359
Manifest file hash:  l6nQX6H2kYvVDTeM5Q+6+v3H6OLwvNgMKHTGQySTnWY=
Signature file hash:  1nMULsj/wyU9SApKOhgKu5d5O/jve4+oLOUaSQAgADg=
Package file hash:  rgG6yUjfu1vC4qJAhwRxA6zduhgx9oozVb68Q5HUHag=
ManifestPackageIntegrityPolicy succeeded.
SignatureIntegrityPolicy for primary signature succeeded.
SignatureValidityPolicy for primary signature succeeded.
SignatureIntegrityPolicy for primary timestamp signature succeeded.
SignatureValidityPolicy for primary timestamp signature succeeded.
X.509 certificate chain validation will use the current user's trust store for timestamping.
SignatureTrustPolicy for publisher primary signature timestamp signature succeeded.
X.509 certificate chain validation will use the current user's trust store for code signing.
SignatureTrustPolicy for publisher primary signature succeeded.
RepositoryCountersignaturePolicy for repository countersignature succeeded with NotPresent.
Primary signature type:  publisher primary signature
Primary signature status:  OK
Timestamp signature status:  OK
Repository countersignature status:  NotPresent
Repository countersignature timestamp status:  Unset
Exit code:  Success