microsoft / sbom-tool

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
MIT License
1.63k stars 133 forks source link

Update EsrpCodeSigning task to version 5 #761

Closed jlperkins closed 3 weeks ago

jlperkins commented 1 month ago

Version 5 of the ESRP code signing task adds support for authentication with managed identities. This PR moves our SBOM CI pipelines to use the updated task.

An example run with the new version of the task can be seen here.

codecov-commenter commented 1 month ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 70.13%. Comparing base (3a9a5d4) to head (7e06fcc).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #761 +/- ## ======================================= Coverage 70.13% 70.13% ======================================= Files 277 277 Lines 8651 8651 Branches 1006 1006 ======================================= Hits 6067 6067 Misses 2065 2065 Partials 519 519 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.