jobs:
- job: 'Sign_OV_Files'
  workspace:
    clean: all
  timeoutInMinutes: 15
  pool: 'onnxruntime-gpu-winbuild-t4'
  
  steps:
    - task: DownloadSecureFile@1
      name: onnxruntimeDlls # The name with which to reference the secure file's path on the agent, like $(mySecureFile.secureFilePath)
      inputs:
        secureFile: '$(secureFile)'

    - script: 'mkdir $(Build.SourcesDirectory)\Artifact && copy $(onnxruntimeDlls.secureFilePath) $(Build.SourcesDirectory)\Artifact'
      displayName: 'Copy dlls to sources directory'

    - script: 'unzip $(secureFile)'
      displayName: 'Unzip dll files'
      workingDirectory: '$(Build.SourcesDirectory)\Artifact'

    - template: templates/win-esrp-dll.yml
      parameters:
        DisplayName: 'ESRP - sign NuGet package'
        FolderPath: '$(Build.SourcesDirectory)\Artifact'
        DoEsrp: 'true'
        Pattern: 'onnxruntime*.dll'
    
    - task: PublishBuildArtifacts@1
      inputs:
        pathtoPublish: '$(Build.SourcesDirectory)\Artifact'
        artifactName: 'Signed Dlls'
        
    - template: templates/clean-agent-build-directory-step.yml