Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build-git-installers: update signing #613

Closed
wants to merge 6 commits into from

Conversation

ldennington
Copy link
Collaborator

@ldennington ldennington commented Oct 24, 2023

This PR migrates microsoft/git's signing workflows off the ESRP service. This means:

  1. Updating the Linux components to sign with a GPG key.
  2. Updating macOS components to sign/notarize using Application and Installer certificates (see this series for more details).

An example run of release workflow with these changes can be found at [1].

1: https://github.com/microsoft/git/actions/runs/6635788798

Update macOS component of build-git-installers workflow to use GitHub
certificates for signing and notarization instead of ESRP.
Update the Linux component of the build-git-installers workflow to use GPG
signing instead of ESRP.
Update Windows component of release workflow to use Azure Code Signing.
Remove scripts that were previously used to support ESRP signing.
Update build-git-installers workflow to publish `microsoft/git`'s GPG public
key as part of each release. Add explanation for how to use this key to verify
the Debian package's signature to the README.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant