diff --git a/tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml b/tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml new file mode 100644 index 0000000000..885873b8e7 --- /dev/null +++ b/tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml @@ -0,0 +1,33 @@ +jobs: +- job: 'Sign_OV_Files' + workspace: + clean: all + timeoutInMinutes: 15 + pool: 'onnxruntime-gpu-winbuild' + + steps: + - task: DownloadSecureFile@1 + name: onnxruntimeDlls # The name with which to reference the secure file's path on the agent, like $(mySecureFile.secureFilePath) + inputs: + secureFile: '$(secureFile)' + + - script: 'mkdir $(Build.SourcesDirectory)\Artifact && copy $(onnxruntimeDlls.secureFilePath) $(Build.SourcesDirectory)\Artifact' + displayName: 'Copy dlls to sources directory' + + - script: 'unzip $(secureFile)' + displayName: 'Unzip dll files' + workingDirectory: '$(Build.SourcesDirectory)\Artifact' + + - template: templates/win-esrp-dll.yml + parameters: + DisplayName: 'ESRP - sign NuGet package' + FolderPath: '$(Build.SourcesDirectory)\Artifact' + DoEsrp: 'true' + Pattern: 'onnxruntime*.dll' + + - task: PublishBuildArtifacts@1 + inputs: + pathtoPublish: '$(Build.SourcesDirectory)\Artifact' + artifactName: 'Signed Dlls' + + - template: templates/clean-agent-build-directory-step.yml