Add portable AKV signing for PowerShell scripts#29
Merged
Marc-André Moreau (mamoreau-devolutions) merged 3 commits intoJul 2, 2026
Merged
Conversation
Extend --mode portable sign with Azure Key Vault-backed signing for PowerShell Authenticode script targets such as .psd1, reusing the portable core path and covering it with CLI regression tests. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Keep the minimal AppxManifest fixture out of Git text normalization so the committed vector manifest stays stable across Windows and non-Windows checkouts. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Update the workspace and release-facing package metadata for the next psign release using the repo's version bump script. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Marc-André Moreau (mamoreau-devolutions)
requested a review
from a team
as a code owner
Marc-André Moreau (mamoreau-devolutions)
merged commit 4e0d1a6
into
master
36 checks passed
Marc-André Moreau (mamoreau-devolutions)
deleted the
mamoreau-devolutions-portable-akv-nonpe-signing
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
--mode portable sign --azure-key-vault-*to support PowerShell Authenticode script targets such as.psd1psign-portable-core, including certificate-version and authority plumbingValidation
cargo fmt --allcargo clippy --workspace --all-targets --lockedcargo test --locked --test cli_pe_digest mode_portable_sign_uses_azure_key_vault_for_psd1 --quietcargo test --locked --test cli_pe_digest mode_portable_sign_uses_azure_key_vault_for_pe --quietbash scripts/linux-portable-validation.shNotes
cargo test --workspace --lockedstill reproduces the pre-existing unrelatedtests/fixture_vector_manifest.rsfailure fortests/fixtures/msix-minimal/AppxManifest.xmlsize mismatch.