#1102: Signing IDEasy MSI Installer#1877
Merged
hohwille merged 3 commits intodevonfw:mainfrom May 5, 2026
Merged
Conversation
Collaborator
Coverage Report for CI Build 25373879645Warning Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes. Coverage increased (+0.005%) to 70.733%Details
Uncovered ChangesNo uncovered changes found. Coverage Regressions2 previously-covered lines in 2 files lost coverage.
Coverage Stats
💛 - Coveralls |
hohwille
approved these changes
May 5, 2026
Member
hohwille
left a comment
hohwille
left a comment
There was a problem hiding this comment.
@ducminh02 thanks for recreating the change as a new PR.
As I wrote in the issue ticket I fixed the configuration on signpath and will now retry it.
hohwille
added
workflow
hohwille
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR fixes #1102
Implemented changes:
Integrated SignPath MSI Signing: Added automated code signing for Windows MSI installers using the SignPath GitHub Action.
Dual-Workflow Support: Enabled signing for both SNAPSHOT releases in nightly-build.yml and official releases in release.yml.
OIDC Authentication: Added id-token: write permissions to allow secure, secret-less authentication between GitHub Actions and SignPath.
Artifact Pipeline Update: Refactored the build process to upload unsigned binaries as temporary artifacts, sign them via SignPath, and distribute only the signed versions.
Git Configuration: Updated .gitignore to ensure .github workflow changes are correctly tracked and not blocked by global dotfile rules.
Checklist for this PR
Make sure everything is checked before merging this PR. For further info please also see
our DoD.
mvn clean testlocally all tests pass and build is successful#«issue-id»: «brief summary»(e.g.#921: fixed setup.bat). If no issue ID exists, title only.In Progressand assigned to you or there is no issue (might happen for very small PRs)with
internal