From 06d28fa10af71ba158f72a388503f07f241809fd Mon Sep 17 00:00:00 2001
From: Ryan Shepherd <ryansh@microsoft.com>
Date: Fri, 6 Feb 2026 16:05:44 -0800
Subject: [PATCH] Only sign the VSIX contents instead of the entire temp
 directory

---
 .pipelines/jobs/OneBranchVsix.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.pipelines/jobs/OneBranchVsix.yml b/.pipelines/jobs/OneBranchVsix.yml
index 1b03f71d..8c49ccf5 100644
--- a/.pipelines/jobs/OneBranchVsix.yml
+++ b/.pipelines/jobs/OneBranchVsix.yml
@@ -114,7 +114,7 @@ jobs:
         command: sign
         signing_profile: external_distribution
         files_to_sign: '**\*.dll'
-        search_root: '$(Agent.TempDirectory)'
+        search_root: '$(Agent.TempDirectory)\$(VsixFilename)'
     
     - task: ArchiveFiles@2
       displayName: 'Repack signed VSIX contents'