Updated mac codesign steps to notarize app (#508)

Azure · May 31, 2022 · 076a775 · 076a775
1 parent 6eeaf92
commit 076a775
Showing 1 changed file with 24 additions and 22 deletions.
diff --git a/pipelines/release-pipeline.yml b/pipelines/release-pipeline.yml
@@ -237,7 +237,9 @@ stages:
                 {
                   "KeyCode" : "CP-401337-Apple",
                   "OperationCode" : "MacAppDeveloperSign",
-                  "Parameters" : {},
+                  "Parameters" : {
+                    "Hardening": "--options=runtime"
+                  },
                   "ToolName" : "sign",
                   "ToolVersion" : "1.0"
                 }
@@ -247,27 +249,27 @@ stages:
           MaxRetryAttempts: '5'
           VerboseLogin: false
 
-      # - task: EsrpCodeSigning@1
-      #   displayName: 'Sign MacOS DMG - Notarized'
-      #   inputs:
-      #     ConnectedServiceName: 'Azure IoT Explorer CodeSign'
-      #     FolderPath: '$(Pipeline.Workspace)'
-      #     Pattern: '*.dmg'
-      #     signConfigType: 'inlineSignParams'
-      #     inlineOperation: |
-      #       [
-      #         {
-      #           "KeyCode" : "CP-401337-Apple",
-      #           "OperationCode" : "MacAppNotarize",
-      #           "Parameters" : {"BundleId":"com.microsoft.Azure.IoTExplorer"},
-      #           "ToolName" : "sign",
-      #           "ToolVersion" : "1.0"
-      #         }
-      #       ]
-      #     SessionTimeout: '60'
-      #     MaxConcurrency: '50'
-      #     MaxRetryAttempts: '5'
-      #     VerboseLogin: false
+      - task: EsrpCodeSigning@1
+        displayName: 'Sign MacOS DMG - Notarized'
+        inputs:
+          ConnectedServiceName: 'Azure IoT Explorer CodeSign'
+          FolderPath: '$(Pipeline.Workspace)'
+          Pattern: '*.dmg'
+          signConfigType: 'inlineSignParams'
+          inlineOperation: |
+            [
+              {
+                "KeyCode" : "CP-401337-Apple",
+                "OperationCode" : "MacAppNotarize",
+                "Parameters" : {"BundleId":"com.microsoft.Azure.IoTExplorer"},
+                "ToolName" : "sign",
+                "ToolVersion" : "1.0"
+              }
+            ]
+          SessionTimeout: '60'
+          MaxConcurrency: '50'
+          MaxRetryAttempts: '5'
+          VerboseLogin: false
 
       - task: CopyFiles@2
         displayName: 'ArtifactIgnore'