[ci] Enable .nupkg signing (#8)

We'll want to release a new version of this package to nuget.org in the
near future, as the latest stable version does not work with the .NET 6
Android SDK. We'll want to enable package signing to release an updated
version.

.gitignore

@@ -6,6 +6,7 @@
 [Bb]in/
 packages/
 TestResults/
+*.nupkg
 
 # globs
 Makefile.in

SignList.xml

@@ -0,0 +1,8 @@
+<Project>
+
+  <ItemGroup>
+    <FirstParty Include="Xamarin.Android.FSharp.ResourceProvider.dll" />
+    <FirstParty Include="Xamarin.Android.FSharp.ResourceProvider.Runtime.dll" />
+  </ItemGroup>
+
+</Project>

azure-pipelines.yml

@@ -1,10 +1,22 @@
 # Xamarin.Android.FSharp.ResourceProvider
 
 trigger:
-  - master
+  - main
 
 pr:
-  - master
+  - main
+
+resources:
+  repositories:
+  - repository: templates
+    type: github
+    name: xamarin/yaml-templates
+    ref: refs/heads/main
+    endpoint: xamarin
+
+variables:
+  - group: Xamarin-Secrets
+  - group: Xamarin Release
 
 jobs:
 - job: build
@@ -41,12 +53,24 @@ jobs:
     inputs:
       command: push
       packagesToPush: $(System.DefaultWorkingDirectory)/bin/*.nupkg
-      publishVstsFeed: public/Xamarin.Android
+      nuGetFeedType: external
+      publishFeedCredentials: xamarin-impl public feed
     condition: and(succeeded(), eq(variables['PushToFeed'], 'true'))
 
-  - task: PublishPipelineArtifact@1
+  - task: CopyFiles@2
+    displayName: copy SignList.xml to artifact
+    inputs:
+      Contents: SignList.xml
+      TargetFolder: $(System.DefaultWorkingDirectory)/bin
+
+  - task: PublishBuildArtifacts@1
     displayName: publish output
     inputs:
-      targetPath: $(System.DefaultWorkingDirectory)/bin
+      pathToPublish: $(System.DefaultWorkingDirectory)/bin
       artifactName: Xamarin.Android.FSharp.ResourceProvider
     condition: succeededOrFailed()
+
+- template: sign-artifacts/jobs/v2.yml@templates
+  parameters:
+    artifactName: Xamarin.Android.FSharp.ResourceProvider
+    dependsOn: [ 'build' ]