💄 (#234417)

microsoft · Nov 26, 2024 · c337f26 · c337f26
1 parent dff8203
commit c337f26
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/build/azure-pipelines/common/sign.js b/build/azure-pipelines/common/sign.js
diff --git a/build/azure-pipelines/common/sign.ts b/build/azure-pipelines/common/sign.ts
@@ -140,11 +140,12 @@ export function main([esrpCliPath, type, folderPath, pattern]: string[]) {
 
 	const key = crypto.randomBytes(32);
 	const iv = crypto.randomBytes(16);
+	const cipher = crypto.createCipheriv('aes-256-cbc', key, iv);
+	const encryptedToken = cipher.update(process.env['SYSTEM_ACCESSTOKEN']!.trim(), 'utf8', 'hex') + cipher.final('hex');
+
 	const encryptionDetailsPath = tmp.tmpNameSync();
 	fs.writeFileSync(encryptionDetailsPath, JSON.stringify({ key: key.toString('hex'), iv: iv.toString('hex') }));
 
-	const cipher = crypto.createCipheriv('aes-256-cbc', key, iv);
-	const encryptedToken = cipher.update(process.env['SYSTEM_ACCESSTOKEN']!.trim(), 'utf8', 'hex') + cipher.final('hex');
 	const encryptedTokenPath = tmp.tmpNameSync();
 	fs.writeFileSync(encryptedTokenPath, encryptedToken);