+
Build process integration
+
+ SignPath.io is built with DevOps in mind. Adding a code signing step to your build process requires just a few lines of code by including our PowerShell script, calling the API directly or using one of our build system integrations. The artifact is then extracted, and all specified files are signed recursively. SignPath can be integrated in a synchronous and an asynchronous call, providing flexibility for different use cases. In the synchronous case, the build job waits for the uploaded artifact to be signed and continues with the following steps right away. In the asynchronous case, the signing request has to be approved and a second pipeline is then started for e.g. deploying the signed artifact. Deeper integration including origin verification is supported with AppVeyor, all other CI systems such as Jenkins, Travis, TeamCity or CircleCI can be integrated by using a generic REST call via PowerShell or cURL.
+
+
View documentation
+
+
+ {% raw %}
+
+
+ Submit-SigningRequest `
+ -OrganizationId $SIGNPATH_ORGANIZATION_ID `
+ -ApiToken $SIGNPATH_API_TOKEN `
+ -ProjectSlug my_software `
+ -SigningPolicySlug release-signing `
+ -InputArtifactPath build/my-release.msi `
+ -OutputArtifactPath build-signed/my-release.msi `
+ -WaitForCompletion
+
+
+ result=$(curl "https://app.signpath.io/api/v1/${SIGNPATH_ORGANIZATION_ID}/SigningRequests" \
+ -H "Authorization: Bearer ${SIGNPATH_API_TOKEN}" \
+ -F "ProjectSlug=my_software" \
+ -F "SigningPolicySlug=release-signing" \
+ -F "Artifact=@./build/my-release.msi" \
+ --retry 20 --retry-delay 30 --silent --verbose)
+ url=$( echo "$result" | grep -i '^< Location: ' | grep -io 'https://.*' | tr -d '\r' )
+ curl "$url/SignedArtifact" --output "build-signed/my-release.msi" --silent \
+ -H "Authorization: Bearer ${SIGNPATH_API_TOKEN}"
+
+
+ submitSigningRequest(
+ organizationId: "${params.SIGNPATH_ORGANIZATION_ID}",
+ ciUserTokenCredentialId: "${params.SIGNPATH_CI_USER_CREDENTIAL_ID}",
+ projectSlug: "my_software",
+ signingPolicySlug: "release-signing",
+ inputArtifactPath: "build/my-release.msi",
+ outputArtifactPath: "build-signed/my-release.msi",
+ waitForCompletion: true
+ )
+
+
+ - uses: signpath/github-action-submit-signing-request@v0.4
+ with:
+ api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
+ organization-id: '${{ vars.SIGNPATH_ORGANIZATION_ID }}'
+ project-slug: 'my_software'
+ signing-policy-slug: 'release-signing'
+ github-artifact-id: '${{ steps.upload-unsigned-artifact.outputs.artifact-id }}'
+ output-artifact-directory: './build-signed'
+ wait-for-completion: 'true'
+
+
+ deploy:
+ - provider: Webhook
+ url: https://app.signpath.io/API/v1/$(SIGNPATH_ORGANIZATION_ID)/Integrations/AppVeyor?ProjectSlug=my_software&SigningPolicySlug=release-siging
+ authorization:
+ secure: VGhpcyBpcyBub3QgdGhlIHNlY3JldCB0b2tlbiB5b3UgYXJlIGxvb2tpbmcgZm9yLi4uIC0gU2lnblBhdGguaW8=
+
+
+ - task: SignPathSubmitSigningRequest@2
+ inputs:
+ organizationId: '$(SIGNPATH_ORGANIZATION_ID)'
+ ciUserToken: '$(SIGNPATH_API_TOKEN)'
+ projectSlug: 'my_software'
+ signingPolicySlug: 'release-siging'
+ inputArtifactPath: './build/my-release.msi'
+ outputArtifactPath: './build-signed/my-release.msi'
+ waitForCompletion: 'sync'
+
+
+ {% endraw %}
+
+
+
+ 
+ 
+