From 8e8f7dc5a8b05bfea56372f9aa9165cc37123113 Mon Sep 17 00:00:00 2001 From: Stef Tervelde Date: Fri, 14 Mar 2025 18:31:02 +0100 Subject: [PATCH] Sign on windows --- .github/workflows/release-gradle.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/.github/workflows/release-gradle.yml b/.github/workflows/release-gradle.yml index 40810e3cc..cafc22ce3 100644 --- a/.github/workflows/release-gradle.yml +++ b/.github/workflows/release-gradle.yml @@ -173,3 +173,19 @@ jobs: run: snapcraft upload --release=beta app/build/compose/binaries/main/${{ matrix.binary }}.${{ matrix.extension }} env: SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.PROCESSING_SNAPCRAFT_TOKEN }} + + - name: Sign files with Trusted Signing + if: runner.os == 'Windows' + uses: azure/trusted-signing-action@v0 + with: + azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }} + azure-client-id: ${{ secrets.AZURE_CLIENT_ID }} + azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }} + endpoint: https://eus.codesigning.azure.net/ + trusted-signing-account-name: vscx-codesigning + certificate-profile-name: vscx-certificate-profile + files-folder: app/build/compose/binaries/main/msi + files-folder-filter: msi + file-digest: SHA256 + timestamp-rfc3161: http://timestamp.acs.microsoft.com + timestamp-digest: SHA256 \ No newline at end of file