dotnet / source-build

A repository to track efforts to produce a source tarball of the .NET Core SDK and all its components
MIT License
265 stars 132 forks source link

Enable signing validation on shipping VMR outputs #4068

Open mmitche opened 9 months ago

mmitche commented 9 months ago

Enable signing validation of VMR build outputs. This may actually be formally covered by https://github.com/dotnet/release/issues/732 in the staging pipeline. Still, it may help to have an interim solution (e..g just running SignCheck over all the binaries to do verification)

dotnet-issue-labeler[bot] commented 9 months ago

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

ellahathaway commented 1 week ago

T-Shirt Size: XS/S

If this is formally covered by https://github.com/dotnet/release/issues/732 then this is likely as simple as running SignCheck over all the binaries.