How do you sign a nuget package (.nupkg)

Question

We currently sign nuget packages using dotnet nuget sign command in the project with 3rd party certificate. How can we sign with Azure Trusted Signing certificate?

Answer 1

Hi @John Earle ,

The dotnet/Sign project now has a pre-release version with Trusted Signing integration to expand our support to NuGet. https://www.nuget.org/packages/sign/0.9.1-beta.24325.5

Once this is more stable, we will publish more information on how to use it with Trusted Signing, but I'm also checking internally to see if there is additional documentation I can share with you.

There was a similar request in Github recently that has an ongoing discussion on this topic. https://github.com/dotnet/sign/issues/683

If the information helped you, please Accept the answer. This will help us and improve searchability for others in the community who may be researching similar questions.