azure-pipelines: Allow template consumer to disable signing with parameter

azure-pipelines/1esmain.yml

@@ -9,6 +9,9 @@ parameters:
   - name: additionalSetupSteps
     type: stepList
     default: []
+  - name: enableSigning
+    type: boolean
+    default: True
 
 # `resources` specifies the location of templates to pick up, use it to get 1ES templates
 resources:
@@ -36,3 +39,4 @@ extends:
         parameters:
           useAzureFederatedCredentials: ${{ parameters.useAzureFederatedCredentials }}
           additionalSetupSteps: ${{ parameters.additionalSetupSteps }}
+          enableSigning: ${{ parameters.enableSigning }}

azure-pipelines/1esstages.yml

@@ -10,6 +10,9 @@ parameters:
   - name: additionalSetupSteps
     type: stepList
     default: []
+  - name: enableSigning
+    type: boolean
+    default: True
 
 stages:
   - stage: BuildStage
@@ -19,8 +22,7 @@ stages:
             templateContext:
               mb: # Enable the MicroBuild Signing toolset
                 signing:
-                  # Enable the signing toolset when the build is not a PR and the branch is main or starts with rel/
-                  enabled: $[and(ne(variables['Build.Reason'], 'PullRequest'), or(eq(variables['Build.SourceBranchName'], 'main'), startsWith(variables['Build.SourceBranchName'], 'rel/')))]
+                  enabled: ${{ parameters.enableSigning }}
                   signType: real # options are 'real' & 'test'
                   zipSources: false
               outputs:
@@ -34,6 +36,8 @@ stages:
               - template: ./templates/build.yml
               - template: ./templates/1espackage.yml
               - template: ./templates/sign.yml
+                parameters:
+                  enableSigning: ${{ parameters.enableSigning }}
               - template: ./templates/stage-artifacts.yml
               - template: ./templates/test.yml
                 parameters:

azure-pipelines/templates/sign.yml

@@ -1,3 +1,8 @@
+parameters:
+  - name: enableSigning
+    type: boolean
+    default: True
+
 steps:
   # Check if the SignExtension.signproj file exists and set a variable using PowerShell
   # All other steps in this template will only run if the file exists
@@ -11,8 +16,7 @@ steps:
           Write-Output "SignExtension.signproj file not found. Skipping signing."
       }
     displayName: "\U0001F449 Check for SignExtension.signproj File"
-    # Run this step when the build is not a PR and the branch is main or starts with rel/
-    condition: and(ne(variables['Build.Reason'], 'PullRequest'), or(eq(variables['Build.SourceBranchName'], 'main'), startsWith(variables['Build.SourceBranchName'], 'rel/')))
+    condition: ${{ parameters.enableSigning }}
 
   # put the extension name and version from the package.json into variables to use later. Variables can be used in later steps as $(package.name) and $(package.version)
   - pwsh: |