publish: update musl-1.1.2.4 prebuilts workflow to zipsign distribu…

…tion zip archive

[skip ci]

.github/workflows/publish-linux-glibc-231-musl-1124.yml

@@ -106,15 +106,31 @@ jobs:
         mv qsvdp qsvdp_${{ matrix.job.name-suffix }}
         rustup show > qsv_${{ matrix.job.name-suffix }}_rust_version_info.txt
         cd ..
+    - name: install zipsign
+      run: |
+        cargo install zipsign
+    - name: Fetch zipsign private key
+      uses: mobiledevops/secret-to-file-action@v1
+      with:
+        base64-encoded-secret: ${{ secrets.QSV_ZIPSIGN_PRIV_KEY }}
+        filename: "qsvpriv.key"
+        is-executable: false
+        working-directory: "."
     - name: Download latest release zip
       uses: robinraju/release-downloader@v1.8
       with:
         repository: "jqnatividad/qsv"
         latest: true
         token: ${{ secrets.GITHUB_TOKEN }}
         fileName: qsv-${{ needs.analyze-tags.outputs.previous-tag }}-${{ matrix.job.target }}.zip
+    - name: remove zipsign signature from zip archive
+      run: |
+        zipsign unsign zip qsv-${{ needs.analyze-tags.outputs.previous-tag }}-${{ matrix.job.target }}.zip
     - name: add/update "older" glibc 2.31/musl 1.1.24 files to zip
       run: 7z u -tzip qsv-${{ needs.analyze-tags.outputs.previous-tag }}-${{ matrix.job.target }}.zip ./qsv-${{ needs.analyze-tags.outputs.previous-tag }}/qsv* -mx=9 -mmt=on
+    - name: re-zipsign zip archive
+      run: |
+        zipsign sign zip qsv-${{ needs.analyze-tags.outputs.previous-tag }}-${{ matrix.job.target }}.zip qsvpriv.key
     - name: Upload zipped binaries to release
       uses: svenstaro/upload-release-action@v2
       with: