Artifact Signing CLI

A simple CLI tool to sign files with Azure Artifact Signing

Prerequisites

• Artifact Signing Account and permissions configured
• .NET (.NET 8 recommended)
• Azure CLI
• Signtool (Windows 11 SDK 10.0.26100.0 or later recommended)
• Rust (Optional if you want to build from source)

Installation

cargo install artifact-signing-cli or download the binary from the latest releases

Usage

The CLI expects the following environment variables to be set or you can pass them as arguments. You need to create an Azure App Registration (you can use this article to get the credentials):

• AZURE_CLIENT_ID (or use --azure-client-id)
• AZURE_CLIENT_SECRET (or use --azure-client-secret)
• AZURE_TENANT_ID (or use --azure-tenant-id)
• AZURE_ARTIFACT_SIGNING_ACCOUNT (or use --account/-a)
• AZURE_ARTIFACT_SIGNING_CERTIFICATE_PROFILE (or use --certificate/-c)

Signing a single file: artifact-signing-cli -e <url> -a <account name> -c <certificate profile name> file1.exe

Signing multiple files: artifact-signing-cli -e <url> -a <account name> -c <certificate profile name> file1.exe file2.exe file3.exe

For more information run artifact-signing-cli --help