Use correct signing certificates for RPM and DEBs (#21522)

.pipelines/PowerShell-Packages-Official.yml

@@ -149,6 +149,7 @@ extends:
           signedDrop: 'drop_linux_sign_linux_fxd_x64_mariner'
           packageType: rpm-fxdependent  #mariner-x64
           jobName: mariner_x64
+          signingProfile: 'CP-459159-Pgp'
 
       - template: /.pipelines/templates/linux-package-build.yml@self
         parameters:
@@ -156,6 +157,7 @@ extends:
           signedDrop: 'drop_linux_sign_linux_fxd_arm64_mariner'
           packageType: rpm-fxdependent-arm64 #mariner-arm64
           jobName: mariner_arm64
+          signingProfile: 'CP-459159-Pgp'
 
       - template: /.pipelines/templates/linux-package-build.yml@self
         parameters:

.pipelines/templates/linux-package-build.yml

@@ -3,6 +3,7 @@ parameters:
   signedeDrop: 'drop_linux_sign_linux_x64'
   packageType: deb
   jobName: 'deb'
+  signingProfile: 'CP-450779-Pgp'
 
 jobs:
 - job: ${{ parameters.jobName }}
@@ -35,6 +36,8 @@ jobs:
       value: $(Build.SourcesDirectory)/PowerShell/.config/tsaoptions.json
     - name: ob_sdl_credscan_suppressionsFile
       value: $(Build.SourcesDirectory)/PowerShell/.config/suppress.json
+    - name: SigningProfile
+      value: ${{ parameters.signingProfile }}
 
   steps:
   - checkout: self
@@ -162,7 +165,7 @@ jobs:
     displayName: Sign deb and rpm packages
     inputs:
       command: 'sign'
-      signing_profile: CP-459159-pgpdetached
+      signing_profile: '$(SigningProfile)'
       files_to_sign: '**/*.rpm;**/*.deb'
       search_root: '$(Pipeline.Workspace)'
 

.vsts-ci/linux.yml

@@ -24,6 +24,7 @@ trigger:
     - .github/ISSUE_TEMPLATE/*
     - .github/workflows/*
     - .dependabot/config.yml
+    - .pipelines/*
     - test/perf/*
 pr:
   branches:
@@ -50,6 +51,7 @@ pr:
     - tools/releaseBuild/azureDevOps/templates/*
     - README.md
     - .spelling
+    - .pipelines/*
 
 variables:
   DOTNET_CLI_TELEMETRY_OPTOUT: 1

.vsts-ci/mac.yml

@@ -16,6 +16,7 @@ trigger:
     - .github/ISSUE_TEMPLATE/*
     - .github/workflows/*
     - .dependabot/config.yml
+    - .pipelines/*
     - test/perf/*
 pr:
   branches:
@@ -42,6 +43,7 @@ pr:
     - tools/releaseBuild/azureDevOps/templates/*
     - README.md
     - .spelling
+    - .pipelines/*
 
 variables:
   DOTNET_CLI_TELEMETRY_OPTOUT: 1

.vsts-ci/windows.yml

@@ -16,6 +16,7 @@ trigger:
     - .github/workflows/*
     - .dependabot/config.yml
     - test/perf/*
+    - .pipelines/*
 pr:
   branches:
     include:
@@ -39,6 +40,7 @@ pr:
     - tools/releaseBuild/azureDevOps/templates/*
     - README.md
     - .spelling
+    - .pipelines/*
 
 variables:
   GIT_CONFIG_PARAMETERS: "'core.autocrlf=false'"