Fix test signing in Windows release pipeline
@zooba is already working on this.
Since Oct 7, 2025.
- Dominant language
- Python
- Stars
- 61
- Forks
- 48
- Avg merge
- 1h 22m
- Merged PRs (30d)
- 4
Description
Currently test signing isn't supported because you need to have installed the (normally untrusted) root onto the build machine first. This is because the signing tools won't submit files for signing unless the certificate is trusted locally (see https://github.com/dotnet/sign/issues/908).
The root certificate needed is at http://www.microsoft.com/pkiops/certs/Microsoft%20Identity%20Verification%20TEST%20ONLY%20Root%20Certificate%20Authority%202020.crt
Should be a simple PowerShell command to install it into the trusted root CAs, but I'll figure out the exact command later.
(Same task as https://github.com/python/pymanager/issues/179)
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.