build: Continue reworking CI for signing

intiface · Jul 22, 2023 · a00f144 · a00f144
1 parent 3b58e9f
commit a00f144
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/.github/workflows/central.yml b/.github/workflows/central.yml
@@ -45,16 +45,22 @@ jobs:
           Write-Output "::set-output name=PFX_PATH::$pfxPath";
       - name: Sign Intiface Central Executable
         shell: pwsh
+        env:
+          PFX_KEY: ${{ secrets.NPLABS_WINDOWS_20210514_SIGNING_KEY }}
         run: |
-          & "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\signtool.exe" sign /f .\cert.pfx /t http://timestamp.digicert.com /fd SHA256 .\build\windows\runner\Release\intiface_central.exe
+          $pfxPath = Join-Path -Path $env:RUNNER_TEMP -ChildPath "cert.pfx";
+          & "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\signtool.exe" sign /f $pfxPath /p $env:PFX_KEY /t http://timestamp.digicert.com /fd SHA256 .\build\windows\runner\Release\intiface_central.exe
       - name: Build Innosetup Installer
         shell: pwsh
         run: |
           iscc .\intiface-central-installer.iss
       - name: Sign Innosetup Installer
         shell: pwsh
+        env:
+          PFX_KEY: ${{ secrets.NPLABS_WINDOWS_20210514_SIGNING_KEY }} 
         run: |
-          & "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\signtool.exe" sign /f .\cert.pfx /t http://timestamp.digicert.com /fd SHA256 .\installer\intiface-central-installer.exe
+          $pfxPath = Join-Path -Path $env:RUNNER_TEMP -ChildPath "cert.pfx";
+          & "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\signtool.exe" sign /f $pfxPath /p $env:PFX_KEY /t http://timestamp.digicert.com /fd SHA256 .\installer\intiface-central-installer.exe
       - name: Archive production artifacts
         uses: actions/upload-artifact@v3
         with: