Triple-C

CyberCoveLLC/Triple-C

Fork 0

Author	SHA1	Message	Date
jknappandClaude Opus 5.5	f8e3ec1150	CI: sign Windows releases with Azure Artifact Signing (#62 ) Build App / compute-version (push) Successful in 17s Details Secret Scan / scan (push) Successful in 7s Details Build App / build-macos (push) Successful in 3m6s Details Build App / build-linux (push) Successful in 5m15s Details Build App / build-windows (push) Successful in 5m52s Details Build App / create-tag (push) Successful in 5s Details Build App / sync-to-github (push) Successful in 1m50s Details Windows releases are now signed with Azure Artifact Signing: the app binary, the MSI, the NSIS installer and its uninstaller, 5 signatures per release. Build-time WiX and NSIS DLLs are skipped. "Verify signatures" fails a release unless the installers, the binaries inside the MSI, and the logged app-binary and uninstaller signatures are all valid and timestamped. Previews are not signed and don't reference the signing secrets. The sign command reaches Tauri through `--config`; the v2 CLI never read TAURI_CONFIG, so the old inline override was a no-op. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-24 02:09:48 +00:00

Author

SHA1

Message

Date

jknappandClaude Opus 5.5

f8e3ec1150

CI: sign Windows releases with Azure Artifact Signing (#62 )

Build App / compute-version (push) Successful in 17s

Details

Secret Scan / scan (push) Successful in 7s

Details

Build App / build-macos (push) Successful in 3m6s

Details

Build App / build-linux (push) Successful in 5m15s

Details

Build App / build-windows (push) Successful in 5m52s

Details

Build App / create-tag (push) Successful in 5s

Details

Build App / sync-to-github (push) Successful in 1m50s

Details

Windows releases are now signed with Azure Artifact Signing: the app binary, the MSI, the NSIS installer and its uninstaller, 5 signatures per release. Build-time WiX and NSIS DLLs are skipped. "Verify signatures" fails a release unless the installers, the binaries inside the MSI, and the logged app-binary and uninstaller signatures are all valid and timestamped.

Previews are not signed and don't reference the signing secrets. The sign command reaches Tauri through `--config`; the v2 CLI never read TAURI_CONFIG, so the old inline override was a no-op.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-24 02:09:48 +00:00

Compare commits

Diff Content Not Available