Add osslsigncode package (#7868)

SPECS/LICENSES-AND-NOTICES/data/licenses.json

@@ -2233,6 +2233,7 @@
                 "node-problem-detector",
                 "ntopng",
                 "opentelemetry-cpp",
+                "osslsigncode",
                 "packer",
                 "pcaudiolib",
                 "pcre2",

SPECS/osslsigncode/osslsigncode.signatures.json

@@ -0,0 +1,5 @@
+{
+    "Signatures": {
+     "osslsigncode-2.7.tar.gz": "00fc2b43395d89a2d07ebbd4981e7a9dbc676c7115d122a1385441c0294239b8"
+    }
+   }

SPECS/osslsigncode/osslsigncode.spec

@@ -0,0 +1,39 @@
+Summary:        Verify and sign routines for PE binaries
+Name:           osslsigncode
+Version:        2.7
+Release:        1%{?dist}
+License:        MIT
+Group:          Applications/System
+Vendor:         Microsoft Corporation
+Distribution:   Mariner
+Source0:        https://github.com/mtrojnar/%{name}/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
+BuildRequires:  python3
+BuildRequires:  cmake
+BuildRequires:  openssl-devel
+BuildRequires:  libcurl-devel
+BuildRequires:  zlib-devel
+
+%description
+Verify and sign routines for PE binaries (EXE,DLL)
+
+%prep
+%autosetup -p1
+
+%build
+mkdir build
+cd build
+cmake -S ..
+cmake --build .
+
+%install
+install -d %{buildroot}%{_bindir}
+install -D -m 755 ./build/osslsigncode %{buildroot}%{_bindir}/osslsigncode
+
+%files
+%license LICENSE.txt
+%{_bindir}/osslsigncode
+
+%changelog
+*   Tue Feb 13 2024 Cameron Baird <cameronbaird@microsoft.com.com> 2.7-1
+-   Original version for CBL-Mariner (license: MIT).
+-   License verified

cgmanifest.json

@@ -15399,6 +15399,16 @@
         }
       }
     },
+    {
+      "component": {
+        "type": "other",
+        "other": {
+          "name": "osslsigncode",
+          "version": "2.7",
+          "downloadUrl": "https://github.com/mtrojnar/osslsigncode/archive/refs/tags/2.7.tar.gz"
+        }
+      }
+    },
     {
       "component": {
         "type": "other",