Skip to content

Verify hashes in the release manifests #53162

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nagilson wants to merge 7 commits into
base: release/dnup
Choose a base branch
from
Open

Verify hashes in the release manifests #53162

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
a573dec
verify release hashes
nagilson Feb 25, 2026
5081096
fix target path
nagilson Feb 25, 2026
35613e0
Remove executables stage (template not on release/dnup)
nagilson Feb 25, 2026
f52d460
remove ambiguity in the check output
nagilson Feb 25, 2026
2194873
concurrency
nagilson Feb 25, 2026
43d0cd8
Merge branch 'release/dnup' into nagilson-nagilson-verify-shas
nagilson Feb 25, 2026
69bb511
scan exe and pkg next
nagilson Feb 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
136 changes: 136 additions & 0 deletions .vsts-dnup-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,4 +97,140 @@ stages:
emoji: 💪
helixTargetQueue: osx.13.arm64.open

- stage: hash_verification
displayName: 🔐 Verify release manifest hashes
dependsOn: []
jobs:
- template: /eng/common/templates/job/job.yml
parameters:
displayName: '🔐 Verify 5.0 release hashes'
pool:
name: $(DncEngPublicBuildPool)
demands: ImageOverride -equals windows.vs2022.amd64.open
os: windows
helixRepo: dotnet/sdk
timeoutInMinutes: 360
enableTelemetry: true
steps:
- powershell: |
New-Item -ItemType Directory -Force -Path '$(Build.SourcesDirectory)/src/Installer/releases/5.0' | Out-Null
try { & '$(Build.SourcesDirectory)/src/Installer/releases/Verify-ReleaseHashes.ps1' -ChannelVersion '5.0' -OutputDir '$(Build.SourcesDirectory)/src/Installer/releases/5.0' } catch { Write-Host $_ }
Write-Host "Script exited with code: $LASTEXITCODE"
displayName: '🔐 Verify 5.0 hashes'
- task: PublishPipelineArtifact@1
displayName: '📦 Publish 5.0 results'
condition: always()
inputs:
targetPath: '$(Build.SourcesDirectory)/src/Installer/releases/5.0'
artifactName: 'hash-verification-5.0'
- template: /eng/common/templates/job/job.yml
parameters:
displayName: '🔐 Verify 6.0 release hashes'
pool:
name: $(DncEngPublicBuildPool)
demands: ImageOverride -equals windows.vs2022.amd64.open
os: windows
helixRepo: dotnet/sdk
timeoutInMinutes: 360
enableTelemetry: true
steps:
- powershell: |
New-Item -ItemType Directory -Force -Path '$(Build.SourcesDirectory)/src/Installer/releases/6.0' | Out-Null
try { & '$(Build.SourcesDirectory)/src/Installer/releases/Verify-ReleaseHashes.ps1' -ChannelVersion '6.0' -OutputDir '$(Build.SourcesDirectory)/src/Installer/releases/6.0' } catch { Write-Host $_ }
Write-Host "Script exited with code: $LASTEXITCODE"
displayName: '🔐 Verify 6.0 hashes'
- task: PublishPipelineArtifact@1
displayName: '📦 Publish 6.0 results'
condition: always()
inputs:
targetPath: '$(Build.SourcesDirectory)/src/Installer/releases/6.0'
artifactName: 'hash-verification-6.0'
- template: /eng/common/templates/job/job.yml
parameters:
displayName: '🔐 Verify 7.0 release hashes'
pool:
name: $(DncEngPublicBuildPool)
demands: ImageOverride -equals windows.vs2022.amd64.open
os: windows
helixRepo: dotnet/sdk
timeoutInMinutes: 360
enableTelemetry: true
steps:
- powershell: |
New-Item -ItemType Directory -Force -Path '$(Build.SourcesDirectory)/src/Installer/releases/7.0' | Out-Null
try { & '$(Build.SourcesDirectory)/src/Installer/releases/Verify-ReleaseHashes.ps1' -ChannelVersion '7.0' -OutputDir '$(Build.SourcesDirectory)/src/Installer/releases/7.0' } catch { Write-Host $_ }
Write-Host "Script exited with code: $LASTEXITCODE"
displayName: '🔐 Verify 7.0 hashes'
- task: PublishPipelineArtifact@1
displayName: '📦 Publish 7.0 results'
condition: always()
inputs:
targetPath: '$(Build.SourcesDirectory)/src/Installer/releases/7.0'
artifactName: 'hash-verification-7.0'
- template: /eng/common/templates/job/job.yml
parameters:
displayName: '🔐 Verify 8.0 release hashes'
pool:
name: $(DncEngPublicBuildPool)
demands: ImageOverride -equals windows.vs2022.amd64.open
os: windows
helixRepo: dotnet/sdk
timeoutInMinutes: 360
enableTelemetry: true
steps:
- powershell: |
New-Item -ItemType Directory -Force -Path '$(Build.SourcesDirectory)/src/Installer/releases/8.0' | Out-Null
try { & '$(Build.SourcesDirectory)/src/Installer/releases/Verify-ReleaseHashes.ps1' -ChannelVersion '8.0' -OutputDir '$(Build.SourcesDirectory)/src/Installer/releases/8.0' } catch { Write-Host $_ }
Write-Host "Script exited with code: $LASTEXITCODE"
displayName: '🔐 Verify 8.0 hashes'
- task: PublishPipelineArtifact@1
displayName: '📦 Publish 8.0 results'
condition: always()
inputs:
targetPath: '$(Build.SourcesDirectory)/src/Installer/releases/8.0'
artifactName: 'hash-verification-8.0'
- template: /eng/common/templates/job/job.yml
parameters:
displayName: '🔐 Verify 9.0 release hashes'
pool:
name: $(DncEngPublicBuildPool)
demands: ImageOverride -equals windows.vs2022.amd64.open
os: windows
helixRepo: dotnet/sdk
timeoutInMinutes: 360
enableTelemetry: true
steps:
- powershell: |
New-Item -ItemType Directory -Force -Path '$(Build.SourcesDirectory)/src/Installer/releases/9.0' | Out-Null
try { & '$(Build.SourcesDirectory)/src/Installer/releases/Verify-ReleaseHashes.ps1' -ChannelVersion '9.0' -OutputDir '$(Build.SourcesDirectory)/src/Installer/releases/9.0' } catch { Write-Host $_ }
Write-Host "Script exited with code: $LASTEXITCODE"
displayName: '🔐 Verify 9.0 hashes'
- task: PublishPipelineArtifact@1
displayName: '📦 Publish 9.0 results'
condition: always()
inputs:
targetPath: '$(Build.SourcesDirectory)/src/Installer/releases/9.0'
artifactName: 'hash-verification-9.0'
- template: /eng/common/templates/job/job.yml
parameters:
displayName: '🔐 Verify 10.0 release hashes'
pool:
name: $(DncEngPublicBuildPool)
demands: ImageOverride -equals windows.vs2022.amd64.open
os: windows
helixRepo: dotnet/sdk
timeoutInMinutes: 360
enableTelemetry: true
steps:
- powershell: |
New-Item -ItemType Directory -Force -Path '$(Build.SourcesDirectory)/src/Installer/releases/10.0' | Out-Null
try { & '$(Build.SourcesDirectory)/src/Installer/releases/Verify-ReleaseHashes.ps1' -ChannelVersion '10.0' -OutputDir '$(Build.SourcesDirectory)/src/Installer/releases/10.0' } catch { Write-Host $_ }
Write-Host "Script exited with code: $LASTEXITCODE"
displayName: '🔐 Verify 10.0 hashes'
- task: PublishPipelineArtifact@1
displayName: '📦 Publish 10.0 results'
condition: always()
inputs:
targetPath: '$(Build.SourcesDirectory)/src/Installer/releases/10.0'
artifactName: 'hash-verification-10.0'

Loading
Loading