From 6d31f717ca1ba9095e98f3cb2007d847c7b9d969 Mon Sep 17 00:00:00 2001
From: Tevin Stanley <tevinstanley@microsoft.com>
Date: Mon, 11 Aug 2025 11:34:46 -0700
Subject: [PATCH] moving to use pme signing requirement, as well as triggering
 signing on new changes to main

---
 azure-pipelines/build.yml    | 1 +
 azure-pipelines/official.yml | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/azure-pipelines/build.yml b/azure-pipelines/build.yml
index 3eb3ebe4..e9bae919 100644
--- a/azure-pipelines/build.yml
+++ b/azure-pipelines/build.yml
@@ -118,6 +118,7 @@ jobs:
           zipSources: false
           ${{ if parameters.RealSign }}:
             signType: real
+            signWithProd: true
           ${{ else }}:
             signType: test
         sbom:
diff --git a/azure-pipelines/official.yml b/azure-pipelines/official.yml
index 6d7c0213..939da7fc 100644
--- a/azure-pipelines/official.yml
+++ b/azure-pipelines/official.yml
@@ -1,4 +1,7 @@
-trigger: none # We only want to trigger manually or based on a schedule
+trigger:
+  branches:
+    include:
+    - main
 pr: none
 #schedules:
 #- cron: "0 3 * * *" # Daily @ 8 PM PST