message: feat(android-signing-binskim): Sign Electron binaries (Windows only)
diff: @@ -23,6 +23,45 @@ jobs:
  artifact: ${{ parameters.unsignedArtifactName }}
  path: '$(System.DefaultWorkingDirectory)/drop/electron/unified-${{ parameters.channel }}'
  + - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
  + displayName: 'ESRP: Sign unpacked binaries'
  + inputs:
  + ConnectedServiceName: 'ESRP Code Signing'
  + FolderPath: '$(System.DefaultWorkingDirectory)/drop/electron/unified-${{ parameters.channel }}'
  + Pattern: '*.exe, *.dll'
  + signConfigType: inlineSignParams
  + inlineOperation: |
  + [
  + {
  + "keyCode": "CP-230012",
  + "operationSetCode": "SigntoolSign",
  + "parameters": [
  + {
  + "parameterName": "OpusName",
  + "parameterValue": "Microsoft"
  + },
  + {
  + "parameterName": "OpusInfo",
  + "parameterValue": "http://www.microsoft.com"
  + },
  + {
  + "parameterName": "PageHash",
  + "parameterValue": "/NPH"
  + },
  + {
  + "parameterName": "FileDigest",
  + "parameterValue": "/fd sha256"
  + },
  + {
  + "parameterName": "TimeStamp",
  + "parameterValue": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
  + }
  + ],
  + "toolName": "signtool.exe",
  + "toolVersion": "6.2.9304.0"
  + }
  + ]
  +
  - script: yarn pack:unified:${{ parameters.channel }}
  displayName: yarn pack:unified:${{ parameters.channel }}
  @@ -36,11 +75,11 @@ jobs:
  TargetFolder: '$(System.DefaultWorkingDirectory)/signing-in-progress/${{ parameters.signedArtifactName }}'
  - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
  - displayName: 'Send to ESRP Code Signing service'
  + displayName: 'ESRP: Sign packed binary'
  inputs:
  ConnectedServiceName: 'ESRP Code Signing'
  FolderPath: '$(System.DefaultWorkingDirectory)/signing-in-progress/${{ parameters.signedArtifactName }}'
  - Pattern: '*.exe, *.dll'
  + Pattern: '*.exe'
  signConfigType: inlineSignParams
  inlineOperation: |
  [
  