this is easier than mucking around

.pipelines/v2/release.yml

@@ -15,6 +15,11 @@ parameters:
     type: boolean
     default: false
 
+  - name: codeSign
+    displayName: "Enable Code Signing"
+    type: boolean
+    default: true
+
   - name: versionNumber
     displayName: "Version Number"
     type: string
@@ -92,7 +97,7 @@ extends:
               versionNumber: ${{ parameters.versionNumber }}
               publishArtifacts: false # 1ES PT handles publication for us.
               official: true
-              codeSign: true
+              codeSign: ${{ parameters.codeSign }}
               runTests: false
               signingIdentity:
                 serviceName: $(SigningServiceName)
@@ -134,7 +139,7 @@ extends:
                 image: SHINE-VS17-Latest-2025
                 os: windows
               official: true
-              codeSign: true
+              codeSign: ${{ parameters.codeSign }}
               signingIdentity:
                 serviceName: $(SigningServiceName)
                 appId: $(SigningAppId)