Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure trusted signing with service connection #8803

Open
erijo opened this issue Jan 24, 2025 · 0 comments
Open

Azure trusted signing with service connection #8803

erijo opened this issue Jan 24, 2025 · 0 comments

Comments

@erijo
Copy link

erijo commented Jan 24, 2025

The requirement to set AZURE environment variables interferes with the use of service connection to connect to the service from a devops pipeline (similar to this example).

I've gotten it to work by:

  1. First running the AzureCLI@2 task to access the service connection and export the three environment variables.
  2. Use az in a separate step to log in using the variables from step 1.
  3. Run electron-builder with the environment variables set as this:
  • AZURE_TENANT_ID=$(ARM_TENANT_ID)

  • AZURE_CLIENT_ID='dummy'

  • AZURE_CLIENT_SECRET='dummy'

    and this in azureSignOptions:

  • "ExcludeEnvironmentCredential": "-Debug"

That will use the AzureCliCredentials. If the environment variables weren't required I think I wouldn't have to give dummy values nor pass the -ExcludeEnvironmentCredential flag to Invoke-TrustedSigning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant