The Latest from Aaronontheweb: Signing NuGet Packages Using Azure DevOps and Workload Identity Federation


Signing NuGet Packages Using Azure DevOps and Workload Identity Federation

Published on April 14, 2025 in

12 minutes to read

Azure released a major update to some of their VM images last week and it’s caused a number of problems for me:

  1. mono support was removed from ubuntu-latest, which caused all of our FAKE v4.0 builds to no longer work for Akka.NET and several of our other mature projects;
  2. SignService, our workhorse for Authenticode signing all Petabridge NuGet packages for the past seven years, stopped working suddenly on the Azure App Service we’ve been using.

I have no idea what Microsoft did to kill this service off, but my guess is they finally stopped supporting the ancient version of .NET Framework this was running on starting on April 11th or so:

Rest in peace, SignService

We had owed a customer an update today and the race was on to find a replacement for SignClient - quickly. We quickly settled upon dotnet/sign - and then the race was on to figure out how to solve the infernal quagmire of Azure Entra / AAD permissions hell in order to access our Azure Key Vault where our signing certificate is stored.

This post explains how to do that.

Click here to read the full article.

Read more...

Aaronontheweb

I write about .NET, open source software, the Microsoft ecosystem, my adventures with startups, and outer space.

Read more from Aaronontheweb

Why Your Software Sucks: Inheritance Published on January 26, 2026 in 7 minutes to read “I have a great idea: let’s create a five-layer deep inheritance hierarchy with a universal base class that every domain object inherits from! That way, when requirements inevitably change, we’ll only need to touch… everything.” This is episode two of my Why Your Software Sucks video series, and today we’re talking about inheritance - specifically, how deep inheritance hierarchies turn your codebase into...

Why Am I Paying $40,000 for the Birth of My Child? Published on November 30, 2025 My third child arrives in a week. The cost? $40,000. Out of pocket. Cash. Not because something went wrong medically. That's just the price of admission for a self-employed entrepreneur who wants to grow a family while running a small business in America. $25,680 in annual premiums + $14,300 deductible = the privilege of bringing a new taxpayer into this world. I wrote about this because Michael Green's viral...

Stop Failing The `git clone && run` Test Published on October 17, 2025 in 10 minutes to read I’ve done a ton of consulting as part of my work at Petabridge over the past 10 years and I run into developer onboarding problems constantly with new clients. It takes much longer than it should to clone a customer’s application from source control and successfully run it. Continuous deployment and continuous integration (CI/CD) get a ton of attention in the DevOps space, but improving the “first...