Arevano Codesign

Zentraler Authenticode-Signierdienst (Azure Artifact Signing, Zeitstempel RFC 3161). Signiert werden .appx, .cab, .cat, .dll, .exe, .msi, .msix, .ps1, .psd1, .psm1, .sys.

CI (GitLab, Gruppe arevano)

include:
  - project: arevano/codesign
    ref: main
    file: templates/codesign.gitlab-ci.yml

sign:
  extends: .arevano-codesign
  needs: [build]
  variables:
    CODESIGN_FILES: "dist/*.exe dist/*.msi"

Nur aus geschützten Branches und Tags; jedes Projekt der Gruppe darf ohne weitere Einrichtung.

Lokal

Recht codesign.sign in der Suite, Anmeldung über Keycloak (Gerätecode).

PowerShell:  irm https://codesign.arevano.com/client/codesign.ps1 -OutFile codesign.ps1; .\codesign.ps1 .\dist\App.exe
sh:          curl -fsSO https://codesign.arevano.com/client/codesign.sh && sh codesign.sh dist/App.exe

Protokoll aller Signaturen: Suite → Codesign.