Triple-C

The first fully signed run (signer CN=OLS Digital LLC) signed the app
binary, the MSI, the NSIS installer and the uninstaller, and skipped the
seven build-time DLLs. It still failed verification on
target\release\triple-c.exe. Tauri patches that file with bundle-type
information before each bundle, signs it, packages it, and patches it
again, so the loose copy is unsigned by design and is not what ships.

Verification now:
- checks the installers themselves;
- unpacks the MSI with `msiexec /a` and checks the binaries inside it;
- for NSIS, which can't be unpacked that way, requires the signing log to
  show that the app binary and the uninstaller were signed.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-23 18:53:58 -07:00

backfill-releases.yml

fix: use browser_download_url for Gitea asset downloads

2026-03-02 10:09:41 -08:00

build-app-preview.yml

ci: sign only what ships, stop signing previews, log signing output

2026-09-23 18:16:32 -07:00

build-app.yml

fix(ci): verify the binary inside the installers, not the loose target copy

2026-09-23 18:53:58 -07:00

build-stt.yml

Add speech-to-text feature using Faster Whisper container