CyberCoveLLC/Triple-C
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 50 Wiki Activity

CI: sign Windows releases with Azure Artifact Signing (#62)
Build App / compute-version (push) Successful in 17s
Details
Secret Scan / scan (push) Successful in 7s
Details
Build App / build-macos (push) Successful in 3m6s
Details
Build App / build-linux (push) Successful in 5m15s
Details
Build App / build-windows (push) Successful in 5m52s
Details
Build App / create-tag (push) Successful in 5s
Details
Build App / sync-to-github (push) Successful in 1m50s
Details

Browse Source 
Windows releases are now signed with Azure Artifact Signing: the app binary, the MSI, the NSIS installer and its uninstaller, 5 signatures per release. Build-time WiX and NSIS DLLs are skipped. "Verify signatures" fails a release unless the installers, the binaries inside the MSI, and the logged app-binary and uninstaller signatures are all valid and timestamped.

Previews are not signed and don't reference the signing secrets. The sign command reaches Tauri through `--config`; the v2 CLI never read TAURI_CONFIG, so the old inline override was a no-op.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit was merged in pull request #62.
This commit is contained in:
jknapp
2026-09-24 02:09:48 +00:00
co-authored by Claude Opus 5.5
parent 85901d8a80
commit f8e3ec1150
7 changed files with 503 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+3
View File
@@ -16,3 +16,6 @@ screenshot_for_fix/
# Package files pulled in by ad-hoc verification runs.
*.deb
# Windows CI code signing (scripts/windows-signing-setup.ps1)
.code-signing/