Skip to content

Commit 281960b

Browse files
authored
CSHARP-5128 Update template_ssdlc_compliance_report.md with signing information (#1344)
1 parent ca17b40 commit 281960b

File tree

3 files changed

+11
-3
lines changed

3 files changed

+11
-3
lines changed

Diff for: evergreen/evergreen.yml

+1
Original file line numberDiff line numberDiff line change
@@ -282,6 +282,7 @@ functions:
282282
params:
283283
working_dir: "mongo-csharp-driver"
284284
env:
285+
NUGET_SIGN_CERTIFICATE_FINGERPRINT: ${NUGET_SIGN_CERTIFICATE_FINGERPRINT}
285286
PRODUCT_NAME: "mongo-csharp-driver"
286287
github_commit: ${github_commit}
287288
script: |

Diff for: evergreen/generate-ssdlc-report.sh

+2
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@
22
set -o errexit # Exit the script with error if any of the commands fail
33

44
# Environment variables used as input:
5+
# NUGET_SIGN_CERTIFICATE_FINGERPRINT
56
# PRODUCT_NAME
67
# PACKAGE_VERSION
78
# github_commit
@@ -31,5 +32,6 @@ sed "${SED_EDIT_IN_PLACE_OPTION[@]}" \
3132
-e "s/\${PACKAGE_VERSION}/$PACKAGE_VERSION/g" \
3233
-e "s/\${github_commit}/$github_commit/g" \
3334
-e "s/\${REPORT_DATE_UTC}/$(date -u +%Y-%m-%d)/g" \
35+
-e "s/\${NUGET_SIGN_CERTIFICATE_FINGERPRINT}/${NUGET_SIGN_CERTIFICATE_FINGERPRINT}/g" \
3436
"${SSDLC_REPORT_PATH}"
3537
ls "${SSDLC_REPORT_PATH}"

Diff for: evergreen/template_ssdlc_compliance_report.md

+8-3
Original file line numberDiff line numberDiff line change
@@ -41,8 +41,7 @@ This information is available in multiple ways:
4141

4242
Blocked on <https://jira.mongodb.org/browse/CSHARP-5047>.
4343

44-
The MongoDB SSDLC policy is available at
45-
<https://docs.google.com/document/d/1u0m4Kj2Ny30zU74KoEFCN4L6D_FbEYCaJ3CQdCYXTMc>.
44+
The MongoDB SSDLC policy is available <a href="https://docs.google.com/document/d/1u0m4Kj2Ny30zU74KoEFCN4L6D_FbEYCaJ3CQdCYXTMc">here</a>.
4645

4746
## Third-darty dependency information
4847

@@ -54,4 +53,10 @@ Coverity static analysis report is available <a href="https://us-west-2.console.
5453

5554
## Signature information
5655

57-
Blocked on <https://jira.mongodb.org/browse/CSHARP-3050>.
56+
Packages are signed with certificate with fingerprint: ${NUGET_SIGN_CERTIFICATE_FINGERPRINT}.
57+
Signature can be validated by running ```dotnet nuget verify``` command.
58+
59+
For example signature of ```Mongodb.Driver.${PACKAGE_VERSION}.nupkg``` package can be verified by running:
60+
```
61+
dotnet nuget verify MongoDB.Driver.${PACKAGE_VERSION}.nupkg --certificate-fingerprint ${NUGET_SIGN_CERTIFICATE_FINGERPRINT}
62+
```

0 commit comments

Comments
 (0)