Setup SBOM signing for VPack (#2133)

* setup SBOM signing for VPack

* yield output

* try get variable properly

* rename variable

* cap the name of output variable

* ready for review

build/pipelines/templates/build-single-architecture.yaml

@@ -55,7 +55,7 @@ jobs:
         downloadDirectory: $(Build.SourcesDirectory)
         vstsFeed: WindowsInboxApps
         vstsFeedPackage: calculator-internals
-        vstsPackageVersion: 0.0.105
+        vstsPackageVersion: 0.0.106
 
   - task: NuGetToolInstaller@1
     displayName: Use NuGet 6.x

build/pipelines/templates/package-msixbundle.yaml

@@ -91,7 +91,7 @@ jobs:
         downloadDirectory: $(Build.SourcesDirectory)
         vstsFeed: WindowsInboxApps
         vstsFeedPackage: calculator-internals
-        vstsPackageVersion: 0.0.105
+        vstsPackageVersion: 0.0.106
 
   - task: PowerShell@2
     displayName: Generate MsixBundle mapping

build/pipelines/templates/release-vpack.yaml

@@ -28,6 +28,23 @@ jobs:
       contents: Microsoft.WindowsCalculator_8wekyb3d8bbwe.msixbundle
       targetFolder: $(Pipeline.Workspace)\vpack\msixBundle
 
+  - task: UniversalPackages@0
+    displayName: Download internals package
+    inputs:
+      command: download
+      downloadDirectory: $(Build.SourcesDirectory)
+      vstsFeed: WindowsInboxApps
+      vstsFeedPackage: calculator-internals
+      vstsPackageVersion: 0.0.106
+
+  - pwsh: |
+      $configPath = "$(Build.SourcesDirectory)\Tools\Build\Signing\ESRP-auth.json"
+      $auth = Get-Content -Raw $configPath | ConvertFrom-Json
+      $sbomKeyCode = $auth._ExtraContext.SbomKeyCode
+      echo $sbomKeyCode
+      echo "##vso[task.setvariable variable=SbomKeyCode]$sbomKeyCode"
+    displayName: Get SBOM Key Code
+
   - task: PkgESVPack@12
     displayName: Create and push vpack for app
     env:
@@ -39,3 +56,8 @@ jobs:
       version: $(versionMajor).$(versionMinor).$(versionBuild)
       owner: paxeeapps
       provData: true
+      taskLogVerbosity: Diagnostic
+      coseUsageScenario: 'product'
+      signSbom: true
+      sbomKeyCode: $(SbomKeyCode)
+      pathToEsrpAuthJson: '$(Build.SourcesDirectory)\Tools\Build\Signing\ESRP-auth.json'