Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use Microsoft Azure Trusted Signing #175

Open
2 tasks done
0x2b3bfa0 opened this issue Apr 3, 2024 · 3 comments · Fixed by #174
Open
2 tasks done

Use Microsoft Azure Trusted Signing #175

0x2b3bfa0 opened this issue Apr 3, 2024 · 3 comments · Fixed by #174
Assignees
@0x2b3bfa0
Labels
enhancement New feature or request

Comments

@0x2b3bfa0
Copy link
Member

0x2b3bfa0 commented Apr 3, 2024 •
edited
Loading

With #174 we've been able to renew the DigiCert certificate until 2025, paying an arm and a leg for it, as usual.

We should migrate Microsoft Azure Trusted Signing as soon as it becomes generally available; it'll be much better.

https://melatonin.dev/blog/how-to-code-sign-windows-installers-with-an-ev-cert-on-github-actions

Workaround
Preview Give feedback
  1. Use Google Cloud KMS for code signing #174
    enhancement
    0x2b3bfa0
@0x2b3bfa0 0x2b3bfa0 added the enhancement New feature or request label Apr 3, 2024
@0x2b3bfa0 0x2b3bfa0 self-assigned this Apr 3, 2024
@0x2b3bfa0 0x2b3bfa0 changed the title Simplify workflow with Microsoft Azure Trusted Signing Use Microsoft Azure Trusted Signing Apr 3, 2024
@skshetry
Copy link
Member

skshetry commented Apr 3, 2024

Should we try emailing them?

@0x2b3bfa0 0x2b3bfa0 mentioned this issue Apr 3, 2024
Merged
@0x2b3bfa0
Copy link
Member Author

0x2b3bfa0 commented Apr 3, 2024 •
edited
Loading

Maybe we can email them, but it looks like "they have stopped taking additional people into the preview"

2024 Update: Azure is working on a Code Signing product and it’s now in Private Preview, along with a companion GitHub Action. They have stopped taking additional people into the preview, citing an imminent public launch (likely with the next big Windows announcements).

@0x2b3bfa0
Copy link
Member Author

Note: Azure Trusted Signing is finally available https://melatonin.dev/blog/code-signing-on-windows-with-azure-trusted-signing 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@0x2b3bfa0 0x2b3bfa0

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Use Google Cloud KMS for code signing iterative/dvc-exe
2 participants
@0x2b3bfa0 @skshetry