Create a release on github and push to Nuget

Add signing service request file

CI-vsts.yml

@@ -1,14 +1,21 @@
-## VSTS pipeline to build, test, package and sign the nuget package
+# VSTS pipeline to build, test, package, sign and release a new nuget package
+#
+# Requirements: define the following Azure DevOps connections
+#   FSharpLu-nuget      - Nuget feed service connection (for pushing new packages)
+#   FSharpLu-Github     - Github service connection (for pushing new releases)
+#
+# The following variables are settable at queue time.
+#  BuildConfiguration
+#  BuildPlatform
+#  SignBuild       - Set to 'true' if code signing is required
+#  PublishRelease  - Set to 'true' to publish a new release to Github and Nuget
 
 queue:
   demands: vstest
 
 variables:
-  NUGET_PACKAGE_VERSION: 0.10.31
-
-#Your build definition references the ‘NUGET_PACKAGE_VERSION’ variable, which you’ve selected to be settable at queue time. Create or edit the build definition for this YAML file, define the variable on the Variables tab, and then select the option to make it settable at queue time. See https://go.microsoft.com/fwlink/?linkid=865971
-#Your build definition references the ‘BuildConfiguration’ variable, which you’ve selected to be settable at queue time. Create or edit the build definition for this YAML file, define the variable on the Variables tab, and then select the option to make it settable at queue time. See https://go.microsoft.com/fwlink/?linkid=865971
-#Your build definition references the ‘BuildPlatform’ variable, which you’ve selected to be settable at queue time. Create or edit the build definition for this YAML file, define the variable on the Variables tab, and then select the option to make it settable at queue time. See https://go.microsoft.com/fwlink/?linkid=865971
+  # Increase version number before every official release (if PublishRelease is set to true)
+  NUGET_PACKAGE_VERSION: 0.10.32
 
 steps:
 - task: DotNetCoreInstaller@0
@@ -43,6 +50,7 @@ steps:
 
 - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
   displayName: ESRP CodeSign .Net assemblies
+  condition: eq(variables['SignBuild'], 'true')
   inputs:
     ConnectedServiceName: 'MSR Springfield Code Signing'
     FolderPath: '$(System.DefaultWorkingDirectory)'
@@ -77,6 +85,7 @@ steps:
 
 - task: SFP.build-tasks.custom-build-task-1.EsrpCodeSigning@1
   displayName: ESRP CodeSign Nuget Package
+  condition: eq(variables['SignBuild'], 'true')
   inputs:
     ConnectedServiceName: 'MSR Springfield Code Signing'
     FolderPath: '$(Build.ArtifactStagingDirectory)\nuget'
@@ -119,10 +128,37 @@ steps:
 
 - task: CopyFiles@2
   displayName: Binplace built assemblies
+  enabled: false
   inputs:
     Contents: '**\bin\**'
     TargetFolder: '$(Build.ArtifactStagingDirectory)\build'
-  enabled: false
 
 - task: PublishBuildArtifacts@1
   displayName: 'Publish Artifact: drop'
+
+- task: GitHubRelease@0
+  condition: eq(variables['PublishRelease'], 'true')
+  inputs:
+    gitHubConnection: 'FSharpLu-Github'
+    repositoryName: '$(Build.Repository.Name)'
+    action: 'create'
+    target: '$(Build.SourceVersion)'
+    tag: 'release-$(Build.SourceVersion)'
+    tagSource: 'manual'
+    title: 'FSharpLu Release $(NUGET_PACKAGE_VERSION)'
+    releaseNotesSource: 'input'
+    releaseNotes: 'Signed release $(NUGET_PACKAGE_VERSION)
+
+      https://www.nuget.org/packages/Microsoft.FSharpLu/
+      https://www.nuget.org/packages/Microsoft.FSharpLu.Json/
+      https://www.nuget.org/packages/Microsoft.FSharpLu.Windows/'
+    isDraft: true
+
+- task: NuGetCommand@2
+  displayName: Publish release to nuget
+  condition: eq(variables['PublishRelease'], 'true')
+  inputs:
+    command: 'push'
+    packagesToPush: '$(Build.ArtifactStagingDirectory)/**/Microsoft.*.nupkg;!$(Build.ArtifactStagingDirectory)/**/*.symbols.nupkg'
+    nuGetFeedType: 'external'
+    publishFeedCredentials: 'FSharpLu-nuget'

fslu_esrprequest.inf

@@ -0,0 +1,33 @@
+[EnhancedKeyUsageExtension]
+
+OID = 1.3.6.1.4.1.311.76.16.1
+OID = 1.3.6.1.5.5.7.3.2
+
+;Client Authentication (1.3.6.1.5.5.7.3.2)
+;PRSS Auth (1.3.6.1.4.1.311.76.16.1)
+
+[NewRequest]
+Subject = "CN=d985dc2c-d0ad-4eba-8d48-71bc3d9d73da"
+
+ProviderName = "Microsoft Software Key Storage Provider"
+;CNG HSM ProviderName = "nCipher Security World Key Storage Provider"
+;Software ProviderName (CAPI) = "Microsoft Enhanced RSA and AES Cryptographic Provider"
+;Software ProviderName (CNG) = "Microsoft Software Key Storage Provider"
+
+MachineKeySet = TRUE
+
+HashAlgorithm = SHA256
+
+KeyLength = 2048
+
+UseExistingKeySet = FALSE
+
+Exportable = TRUE
+
+RequestType = PKCS10
+
+Silent = TRUE
+
+[Extensions]
+ 2.5.29.17 = "{text}"
+    _continue_ = "UPN=fsharplu@microsoft.com&"