Skip to content

[release/10.0.1xx] Port signature verification changes from PR #56468 - #56470

Merged
joeloff merged 3 commits into
release/10.0.1xxfrom
copilot/release-1001xx-port-signature-verification
Oct 16, 2026
Merged

joeloff merged 3 commits into
release/10.0.1xxfrom
copilot/release-1001xx-port-signature-verification

Conversation

Copilot AI commented Oct 1, 2026 •

Copy link
Copy Markdown
Contributor
  • Make MsiPackageCache.VerifyPackageSignature internal on release/10.0.1xx.
  • Verify the MSI signature immediately before the admin-install lock in ExtractManifestAsync.
  • Run focused validation and review the resulting diff; CLI build succeeded with no warnings or errors.
  • Push the port of [release/10.0.4xx] Verify MSI signature before manifest extraction. #56468 to the requested release branch.

@azure-pipelines

azure-pipelines Bot commented Oct 1, 2026 •

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

Co-authored-by: joeloff <7409981+joeloff@users.noreply.github.com>
@joeloff
joeloff marked this pull request as ready for review October 7, 2026 15:33
Copilot AI balanced review requested due to automatic review settings October 7, 2026 15:33

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The focused port matches the source change and introduces no unresolved issues.

0 open findings

What changed in this PR

Ports the MSI signature-verification fix from PR #56468 to the release branch.

Changes:

  • Exposes the existing MSI signature verifier internally.
  • Verifies MSI signatures before administrative manifest extraction.
File Description
MsiPackageCache.cs Makes signature verification internally accessible.
NetSdkMsiInstallerClient.cs Verifies the MSI before invoking Windows Installer.

🧠 Review effort: Balanced


💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

@joeloff joeloff changed the title [WIP] Port signature verification changes from PR #56468 Port signature verification changes from PR #56468 Oct 7, 2026
@joeloff joeloff changed the title Port signature verification changes from PR #56468 [release/10.0.1xx] Port signature verification changes from PR #56468 Oct 7, 2026
@joeloff
joeloff merged commit 31dc444 into release/10.0.1xx Oct 16, 2026
30 of 33 checks passed
@joeloff
joeloff deleted the copilot/release-1001xx-port-signature-verification branch October 16, 2026 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants