botbuilder-dotnet/build/yaml/sign-steps.yml

steps:
- task: CopyFiles@2
  displayName: 'Copy packages to Signing'
  inputs:
    SourceFolder: '$(build.sourcesdirectory)'
    Contents: |
     outputpackages\*.nupkg
     outputpackages\*.snupkg
     !outputpackages\*.symbols.nupkg     
    TargetFolder: '$(build.artifactstagingdirectory)\Signing'
    flattenFolders: true

- task: PowerShell@2
  displayName: 'Unpack .nuget packages'
  inputs:
    targetType: filePath
    filePath: ./build/ExtractCompressNuGet.ps1
    arguments: '$(Build.ArtifactStagingDirectory)\Signing  -Extract'

- task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@2
  displayName: 'ESRP Signing - strong name (CP-233863-SN)'
  inputs:
    ConnectedServiceName: 'ESRP Code Signing Connection 2020a'
    FolderPath: '$(build.artifactstagingdirectory)\Signing'
    signConfigType: inlineSignParams
    inlineOperation: |
     [
         {
             "keyCode": "CP-233863-SN",
             "operationSetCode": "StrongNameSign",
             "parameters": [],
             "toolName": "sign",
             "toolVersion": "1.0"
         },
         {
             "keyCode": "CP-233863-SN",
             "operationSetCode": "StrongNameVerify",
             "parameters": [],
             "toolName": "sign",
             "toolVersion": "1.0"
         }
     ]
          
    SessionTimeout: 20

- task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@2
  displayName: 'ESRP Signing - authenticode (CP-230012)'
  inputs:
    ConnectedServiceName: 'ESRP Code Signing Connection 2020a'
    FolderPath: '$(build.artifactstagingdirectory)\Signing'
    signConfigType: inlineSignParams
    inlineOperation: |
     [
        {
            "keyCode": "CP-230012",
            "operationSetCode": "SigntoolSign",
            "parameters": [
            {
                "parameterName": "OpusName",
                "parameterValue": "Microsoft"
            },
            {
                "parameterName": "OpusInfo",
                "parameterValue": "http://www.microsoft.com"
            },
            {
                "parameterName": "PageHash",
                "parameterValue": "/NPH"
            },
            {
                "parameterName": "FileDigest",
                "parameterValue": "/fd \"SHA256\""
            },
            {
                "parameterName": "TimeStamp",
                "parameterValue": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
            }
            ],
            "toolName": "sign",
            "toolVersion": "1.0"
        },
        {
            "keyCode": "CP-230012",
            "operationSetCode": "SigntoolVerify",
            "parameters": [ ],
            "toolName": "sign",
            "toolVersion": "1.0"
        }
     ]     
    SessionTimeout: 20

- script: |
   cd ..
   dir *.* /s   
  displayName: 'Dir workspace'

- task: PowerShell@2
  displayName: 'Repack .nuget packages'
  inputs:
    targetType: filePath
    filePath: ./build/ExtractCompressNuGet.ps1
    arguments: '$(Build.ArtifactStagingDirectory)\Signing -Compress'

- task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@2
  displayName: 'ESRP Signing - *.nupkg,*.snupkg (CP-401405)'
  inputs:
    ConnectedServiceName: 'ESRP Code Signing Connection 2020a'
    FolderPath: '$(build.artifactstagingdirectory)\Signing'
    Pattern: '*.nupkg,*.snupkg'
    signConfigType: inlineSignParams
    inlineOperation: |
     [
         {
             "keyCode": "CP-401405",
             "operationSetCode": "NuGetSign",
             "parameters": [],
             "toolName": "sign",
             "toolVersion": "1.0"
         },
         {
             "keyCode": "CP-401405",
             "operationSetCode": "NuGetVerify",
             "parameters": [],
             "toolName": "sign",
             "toolVersion": "1.0"
         }
     ]     
    SessionTimeout: 20

- task: CopyFiles@2
  displayName: 'Copy *.nupkg,*.snupkg files to publish'
  inputs:
    SourceFolder: '$(Build.ArtifactStagingDirectory)\Signing'
    Contents: |
     *.nupkg
     *.snupkg
     !*.symbols.nupkg     
    TargetFolder: '$(Build.ArtifactStagingDirectory)\publish'

- task: AzureArtifacts.manifest-generator-task.manifest-generator-task.ManifestGeneratorTask@0
  displayName: 'Generate Software Bill of Materials (SBOM)'
  inputs:
    BuildDropPath: '$(System.ArtifactsDirectory)\publish'
    PackageName: 'Microsoft Bot Framework SDK for DotNet'
    PackageVersion: $(ReleasePackageVersion)

- task: PublishBuildArtifacts@1
  displayName: 'Push *.nupkg,*.snupkg files to Artifacts Packages'
  inputs:
    PathtoPublish: '$(Build.ArtifactStagingDirectory)\publish'
    ArtifactName: Packages

- powershell: |
   [string[]]$outvar = (Get-ChildItem *.nupkg -Path $(Build.ArtifactStagingDirectory)\publish ).BaseName;
   
   [int] $packageCount = $outvar.Length;
   $PackagesDescription = "$packageCount packages";
   $PackagesDescription;
   $outvar;

   "##vso[task.setvariable variable=PackagesDescription;]$PackagesDescription";
   [int] $maxTags = 5;

   if ($packageCount -gt $maxTags) {
       # Too many packages for tags.

       # Set a few package name variables for tags
       for ($i = 0; $i -lt $maxTags; $i++ ) {
           $p = $outvar[$i];
           "##vso[task.setvariable variable=pkg$i;]$p";
       }

       $message = "(See 'Package names' task log for full list)";
       Write-Host "##vso[task.setvariable variable=pkg$i;]$message";
       Write-Host $message;
       $packageCount = ++$i;
   } else {
       # Set package name variables for tags
       for ($i = 0; $i -lt $packageCount; $i++ ) {
           $p = $outvar[$i];
           "##vso[task.setvariable variable=pkg$i;]$p";
       }
   }

   for ($i = $packageCount; $i -le 30; $i++ ) {
       # Set remaining variables to an empty string
       "##vso[task.setvariable variable=pkg$i;]";
   }   
  displayName: 'Package names'
  continueOnError: true

- task: colinsalmcorner.colinsalmcorner-buildtasks.tag-build-task.tagBuildOrRelease@0
  displayName: 'Tag Build with package names'
  inputs:
    tags: |
     $(PACKAGESDESCRIPTION)
     $(PKG0)
     $(PKG1)
     $(PKG2)
     $(PKG3)
     $(PKG4)
     $(PKG5)
     $(PKG6)
     $(PKG7)
     $(PKG8)
     $(PKG9)
     $(PKG10)
     $(PKG11)
     $(PKG12)
     $(PKG13)
     $(PKG14)
     $(PKG15)
     $(PKG16)
     $(PKG17)
     $(PKG18)
     $(PKG19)
     $(PKG20)
     $(PKG21)
     $(PKG22)
     $(PKG23)
     $(PKG24)
     $(PKG25)
     $(PKG26)
     $(PKG27)
     $(PKG28)
     $(PKG29)     
  continueOnError: true

- script: |
   cd ..
   dir *.* /s   
  displayName: 'Dir workspace'
  continueOnError: true
  condition: succeededOrFailed()