Introduction

Azure ClickOnce Sign Tool

Compiling to a single EXE for deployment

If you want a single exe for distribution (windows platform), run the powershell script in the root dir. This simply uses ilrepack (the modern ilmerge) to combine the build exe with the dlls. It builds from Release by default; pass -Configuration Debug to merge a debug build instead. It creates a file called AzureKeyVaultSigner.exe

Requires the ilrepack global tool: dotnet tool install --global dotnet-ilrepack

Usage (If using the compiled exe above, the executable is AzureKeyVaultSigner)

AzureSignToolClickOnce.exe ^
-p=bin\Release\app.publish^
-azure-key-vault-url=https://1234-vault.vault.azure.net/^\ -azure-key-vault-client-id=1234^
-azure-key-vault-client-secret=1234^
-azure-key-vault-tenant-id=1234^
-azure-key-vault-certificate=MyGlobalSignCert^
-timestamp-sha2=http://timestamp.globalsign.com/?signature=sha2^\ -timestamp-rfc3161=http://rfc3161timestamp.globalsign.com/advanced^\ -description=MyApp^

More info on: https://www.davici.nl/blog/clickonce-signing-from-azure-devops-via-azure-key-vault