Trusted Signing CLI

A simple CLI tool to sign files with Trusted Signing

Prerequisites

• Trusted Signing Account and permissions configured
• .NET (.NET 6 or later recommended)
• Azure CLI
• Signtool (Windows 11 SDK 10.0.26100.0 or later recommended)
• Rust (Optional if you want to build from source)

Installation

cargo install trusted-signing-cli or download the binary from the latest releases

Usage

The CLI expects the following environment variables to be set or you can pass them as arguments. You need to create an Azure App Registration (you can use this article to get the credentials):

• AZURE_CLIENT_ID
• AZURE_CLIENT_SECRET
• AZURE_TENANT_ID

Signing a single file: trusted-signing-cli -e <url> -a <account name> -c <certificate profile name> file1.exe

Signing multiple files: trusted-signing-cli -e <url> -a <account name> -c <certificate profile name> file1.exe file2.exe file3.exe

For more information run trusted-signing-cli --help