File tree 3 files changed +11
-3
lines changed
3 files changed +11
-3
lines changed Original file line number Diff line number Diff line change @@ -282,6 +282,7 @@ functions:
282
282
params :
283
283
working_dir : " mongo-csharp-driver"
284
284
env :
285
+ NUGET_SIGN_CERTIFICATE_FINGERPRINT : ${NUGET_SIGN_CERTIFICATE_FINGERPRINT}
285
286
PRODUCT_NAME : " mongo-csharp-driver"
286
287
github_commit : ${github_commit}
287
288
script : |
Original file line number Diff line number Diff line change 2
2
set -o errexit # Exit the script with error if any of the commands fail
3
3
4
4
# Environment variables used as input:
5
+ # NUGET_SIGN_CERTIFICATE_FINGERPRINT
5
6
# PRODUCT_NAME
6
7
# PACKAGE_VERSION
7
8
# github_commit
@@ -31,5 +32,6 @@ sed "${SED_EDIT_IN_PLACE_OPTION[@]}" \
31
32
-e " s/\$ {PACKAGE_VERSION}/$PACKAGE_VERSION /g" \
32
33
-e " s/\$ {github_commit}/$github_commit /g" \
33
34
-e " s/\$ {REPORT_DATE_UTC}/$( date -u +%Y-%m-%d) /g" \
35
+ -e " s/\$ {NUGET_SIGN_CERTIFICATE_FINGERPRINT}/${NUGET_SIGN_CERTIFICATE_FINGERPRINT} /g" \
34
36
" ${SSDLC_REPORT_PATH} "
35
37
ls " ${SSDLC_REPORT_PATH} "
Original file line number Diff line number Diff line change @@ -41,8 +41,7 @@ This information is available in multiple ways:
41
41
42
42
Blocked on < https://jira.mongodb.org/browse/CSHARP-5047 > .
43
43
44
- The MongoDB SSDLC policy is available at
45
- < https://docs.google.com/document/d/1u0m4Kj2Ny30zU74KoEFCN4L6D_FbEYCaJ3CQdCYXTMc > .
44
+ The MongoDB SSDLC policy is available <a href =" https://docs.google.com/document/d/1u0m4Kj2Ny30zU74KoEFCN4L6D_FbEYCaJ3CQdCYXTMc " >here</a >.
46
45
47
46
## Third-darty dependency information
48
47
@@ -54,4 +53,10 @@ Coverity static analysis report is available <a href="https://us-west-2.console.
54
53
55
54
## Signature information
56
55
57
- Blocked on < https://jira.mongodb.org/browse/CSHARP-3050 > .
56
+ Packages are signed with certificate with fingerprint: ${NUGET_SIGN_CERTIFICATE_FINGERPRINT}.
57
+ Signature can be validated by running ``` dotnet nuget verify ``` command.
58
+
59
+ For example signature of ``` Mongodb.Driver.${PACKAGE_VERSION}.nupkg ``` package can be verified by running:
60
+ ```
61
+ dotnet nuget verify MongoDB.Driver.${PACKAGE_VERSION}.nupkg --certificate-fingerprint ${NUGET_SIGN_CERTIFICATE_FINGERPRINT}
62
+ ```
You can’t perform that action at this time.
0 commit comments