Sign

opengisch · May 15, 2024 · 26cdc9a · 26cdc9a
1 parent 9408533
commit 26cdc9a
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
@@ -125,6 +125,22 @@ jobs:
           name: package-logs-x64-windows-static
           path: ${{ env.CMAKE_BUILD_DIR }}/_CPack_Packages/**/*.log
 
+      - name: 🎭 Sign
+        if: github.event_name == 'release' && startsWith(github.ref, 'refs/tags/v') && env.ARTIFACT_NAME != null
+        uses: azure/trusted-signing-action@v0.3.16
+        with:
+          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+          endpoint: https://weu.codesigning.azure.net/
+          code-signing-account-name: OPENGISch
+          certificate-profile-name: QField
+          files-folder: ${{ env.CMAKE_BUILD_DIR }}
+          files-folder-filter: exe,msi
+          file-digest: SHA256
+          timestamp-rfc3161: http://timestamp.acs.microsoft.com
+          timestamp-digest: SHA256
+
       - name: 📦 Upload package
         if: ${{ env.ARTIFACT_NAME != null }}
         uses: actions/upload-artifact@v4