Skip to content

ci: restrict assembly signing and protect release packaging - #741

Merged
mpreyskurantov merged 6 commits into
DevExpress:masterfrom
mpreyskurantov:nuget-trust-sign-dll
Oct 7, 2026
Merged

mpreyskurantov merged 6 commits into
DevExpress:masterfrom
mpreyskurantov:nuget-trust-sign-dll

Conversation

@mpreyskurantov

Copy link
Copy Markdown
Contributor

Patch for:


Separate CI packaging from release publishing.
Restrict assembly signing to trusted upstream runs; use unsigned Debug builds elsewhere.
Align .NET packaging across workflows and protect release packaging with an environment approval gate.

@mpreyskurantov mpreyskurantov self-assigned this Oct 6, 2026
Comment thread .github/workflows/ci.yml Outdated
IlyaKhD
IlyaKhD previously approved these changes Oct 7, 2026
@mpreyskurantov
mpreyskurantov merged commit 08bacb3 into DevExpress:master Oct 7, 2026
10 checks passed
@mpreyskurantov
mpreyskurantov deleted the nuget-trust-sign-dll branch October 7, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants