[CI] Verify the notarized pkgs. (#11677)

dotnet · May 26, 2021 · 9d97d43 · 9d97d43 · vs-mobiletools-engineering-service2 · May 26, 2021
1 parent 90c9593
commit 9d97d43
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/tools/devops/automation/templates/build/sign-and-notarized.yml b/tools/devops/automation/templates/build/sign-and-notarized.yml
@@ -153,3 +153,11 @@ steps:
 
 - pwsh: $(Build.SourcesDirectory)/release-scripts/notarize.ps1 -FolderForApps $(Build.SourcesDirectory)/package/notarized
   displayName: 'ESRP notarizing packages'
+
+- pwsh: |
+    $notarizedRoot = $(Build.SourcesDirectory)/package/notarized
+    Get-ChildItem -Path $notarizedRoot -Filter *.pkg -Recurse -File | ForEach-Object {
+       Write-Host "pkgutil --check-signature $($_.FullName)"
+       pkgutil --check-signature $_.FullName
+    }
+  displayName: 'Verify ESRP notarization'