azure-artifact-signing

Configure Azure Artifact Signing certificates and RBAC workflows in CI/CD pipelines.

Updated Mar 18, 2026

Search Tags:#security #azure #rbac #ci-cd #certificate-management #artifact-signing

Ready to run

npx skills add https://github.com/mfcollins3/standup --skill azure-artifact-signing-mfcollins3

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-artifact-signing
Source: https://github.com/mfcollins3/standup/tree/main/.github/skills/azure-artifact-signing
Command: npx skills add https://github.com/mfcollins3/standup --skill azure-artifact-signing-mfcollins3

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure Artifact Signing provides a secure, auditable mechanism to sign artifacts in CI/CD pipelines, preventing tampering and ensuring trusted releases across Azure DevOps and GitHub Actions.

Core Features & Use Cases

Certificate lifecycle management and RBAC-enabled signing workflows.
DGSSv2 migration guidance and secure deployment patterns for artifact signing.
Use case examples: signing build outputs, enforcing code integrity policies, and auditing signing events.

Quick Start

Configure a signing pipeline to issue and rotate Azure Artifact Signing certificates within your CI/CD workflow.

Frequently Asked Questions about azure-artifact-signing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure Azure Artifact Signing within a CI/CD pipeline?▼

Azure Artifact Signing secures CI/CD pipelines by providing a tamper-proof, auditable mechanism to sign build outputs, ensuring trusted releases and enforcing code integrity policies across Azure DevOps and GitHub Actions.

What is the best way to manage certificate lifecycles for artifact signing?▼

Managing artifact signing certificate lifecycles involves using a signing pipeline that automatically issues and rotates Azure Artifact Signing certificates within your CI/CD workflow, ensuring secure and auditable key management.

Can I use Azure Artifact Signing with GitHub Actions?▼

Yes, Azure Artifact Signing applies to both Azure DevOps and GitHub Actions, providing secure deployment patterns and RBAC-enabled workflows to sign build outputs and enforce code integrity policies across both platforms.

How do I migrate to DGSSv2 for artifact signing?▼

Migrating to DGSSv2 for artifact signing requires following specific migration guidance and secure deployment patterns to transition your existing code signing workflows within your CI/CD pipelines without disrupting trusted releases.

Why do I need RBAC governance for code signing in Azure DevOps?▼

RBAC governance is needed for code signing in Azure DevOps to control access to signing certificates, prevent unauthorized tampering, and maintain an auditable record of signing events for secure releases.