From 1879c6fa77cdbc12605715ba70c7e55983e2af5d Mon Sep 17 00:00:00 2001 From: Armin Schrenk Date: Wed, 24 Jun 2026 17:31:42 +0200 Subject: [PATCH] Revert #4169 and fix ps1 files not signed --- .github/workflows/win-exe.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/.github/workflows/win-exe.yml b/.github/workflows/win-exe.yml index bfe702ab3..1c8af5ebf 100644 --- a/.github/workflows/win-exe.yml +++ b/.github/workflows/win-exe.yml @@ -234,6 +234,17 @@ jobs: tenant-id: ${{ secrets.AZURE_TENANT_ID }} client-id: ${{ secrets.AZURE_CLIENT_ID }} client-secret: ${{ secrets.AZURE_CLIENT_SECRET }} + - name: Sign DLLs with Actalis CodeSigner + if: inputs.sign || github.event_name == 'release' + uses: skymatic/workflows/.github/actions/win-sign-action@957d3c2c08c56855fdac41e5afb9a7aca8c30dd9 # no specific version + with: + base-dir: 'appdir' + file-extensions: 'dll,exe,ps1' + recursive: true + sign-description: 'Cryptomator' + sign-url: 'https://cryptomator.org' + username: ${{ secrets.WIN_CODESIGN_USERNAME }} + password: ${{ secrets.WIN_CODESIGN_PW }} - name: Replace DLLs inside jars with signed ones shell: pwsh run: | @@ -418,6 +429,16 @@ jobs: tenant-id: ${{ secrets.AZURE_TENANT_ID }} client-id: ${{ secrets.AZURE_CLIENT_ID }} client-secret: ${{ secrets.AZURE_CLIENT_SECRET }} + - name: Sign burn engine with Actalis CodeSigner + if: inputs.sign || github.event_name == 'release' + uses: skymatic/workflows/.github/actions/win-sign-action@957d3c2c08c56855fdac41e5afb9a7aca8c30dd9 # no specific version + with: + base-dir: 'tmp' + file-extensions: 'exe' + sign-description: 'Cryptomator Bundle Installer' + sign-url: 'https://cryptomator.org' + username: ${{ secrets.WIN_CODESIGN_USERNAME }} + password: ${{ secrets.WIN_CODESIGN_PW }} - name: Reattach signed burn engine to installer if: inputs.sign || github.event_name == 'schedule' shell: pwsh @@ -435,6 +456,16 @@ jobs: tenant-id: ${{ secrets.AZURE_TENANT_ID }} client-id: ${{ secrets.AZURE_CLIENT_ID }} client-secret: ${{ secrets.AZURE_CLIENT_SECRET }} + - name: Sign installer with Actalis CodeSigner + if: inputs.sign || github.event_name == 'release' + uses: skymatic/workflows/.github/actions/win-sign-action@957d3c2c08c56855fdac41e5afb9a7aca8c30dd9 # no specific version + with: + base-dir: 'installer' + file-extensions: 'exe' + sign-description: 'Cryptomator Bundle Installer' + sign-url: 'https://cryptomator.org' + username: ${{ secrets.WIN_CODESIGN_USERNAME }} + password: ${{ secrets.WIN_CODESIGN_PW }} - id: sha256sum run: | read -ra CMD_OUTPUT < <(sha256sum installer/Cryptomator-*.exe)