From 80a950cde196c9d150050e07a3a2e30d77e58e4b Mon Sep 17 00:00:00 2001
From: Olivia Jain <oljain@microsoft.com>
Date: Fri, 29 Apr 2022 10:54:37 -0700
Subject: [PATCH] Create OV EP Signing Pipeline (#11391)

* Create new pipeline to sign ov ep binaries

* make codesign available

* make codesign available

* Update sign_ov_ep_binaries.yml for Azure Pipelines

* Update sign_ov_ep_binaries.yml for Azure Pipelines

* add codesign task

* Update sign_ov_ep_binaries.yml for Azure Pipelines

* Update sign_ov_ep_binaries.yml for Azure Pipelines

* windows

* reduce timeout to 15 minutes
---
 .../azure-pipelines/sign_ov_ep_binaries.yml   | 33 +++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml

diff --git a/tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml b/tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml
new file mode 100644
index 0000000000..885873b8e7
--- /dev/null
+++ b/tools/ci_build/github/azure-pipelines/sign_ov_ep_binaries.yml
@@ -0,0 +1,33 @@
+jobs:
+- job: 'Sign_OV_Files'
+  workspace:
+    clean: all
+  timeoutInMinutes: 15
+  pool: 'onnxruntime-gpu-winbuild'
+  
+  steps:
+    - task: DownloadSecureFile@1
+      name: onnxruntimeDlls # The name with which to reference the secure file's path on the agent, like $(mySecureFile.secureFilePath)
+      inputs:
+        secureFile: '$(secureFile)'
+
+    - script: 'mkdir $(Build.SourcesDirectory)\Artifact && copy $(onnxruntimeDlls.secureFilePath) $(Build.SourcesDirectory)\Artifact'
+      displayName: 'Copy dlls to sources directory'
+
+    - script: 'unzip $(secureFile)'
+      displayName: 'Unzip dll files'
+      workingDirectory: '$(Build.SourcesDirectory)\Artifact'
+
+    - template: templates/win-esrp-dll.yml
+      parameters:
+        DisplayName: 'ESRP - sign NuGet package'
+        FolderPath: '$(Build.SourcesDirectory)\Artifact'
+        DoEsrp: 'true'
+        Pattern: 'onnxruntime*.dll'
+    
+    - task: PublishBuildArtifacts@1
+      inputs:
+        pathtoPublish: '$(Build.SourcesDirectory)\Artifact'
+        artifactName: 'Signed Dlls'
+        
+    - template: templates/clean-agent-build-directory-step.yml