Optional build signing

This commit is contained in:
Flowseal committed 2026-10-11 19:44:57 +03:00
1 parent 241d76d7b9
commit 307a384ab7
1 file changed
+17 -6
+17 -6
View File
@@ -12,6 +12,11 @@ on:
description: "Release version tag (e.g. v1.0.0)" description: "Release version tag (e.g. v1.0.0)"
required: false required: false
default: "v1.0.0" default: "v1.0.0"
sign_windows:
description: 'Sign?'
type: boolean
required: false
default: true
build_windows_x64: build_windows_x64:
description: 'Build Windows x64?' description: 'Build Windows x64?'
type: boolean type: boolean
@@ -104,6 +109,7 @@ jobs:
run: mv dist/TgWsProxy.exe dist/TgWsProxy_windows.exe run: mv dist/TgWsProxy.exe dist/TgWsProxy_windows.exe
- name: Upload unsigned artifact - name: Upload unsigned artifact
if: ${{ inputs.sign_windows }}
id: upload-unsigned id: upload-unsigned
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@v7
with: with:
@@ -113,6 +119,7 @@ jobs:
if-no-files-found: error if-no-files-found: error
- name: Sign EXE with SignPath - name: Sign EXE with SignPath
if: ${{ inputs.sign_windows }}
uses: signpath/github-action-submit-signing-request@v3 uses: signpath/github-action-submit-signing-request@v3
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@@ -124,11 +131,11 @@ jobs:
wait-for-completion: true wait-for-completion: true
output-artifact-directory: signed output-artifact-directory: signed
- name: Upload signed artifact - name: Upload Windows artifact
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@v7
with: with:
name: TgWsProxy-windows-x64 name: TgWsProxy-windows-x64
path: signed/TgWsProxy_windows.exe path: ${{ inputs.sign_windows && 'signed' || 'dist' }}/TgWsProxy_windows.exe
archive: true archive: true
if-no-files-found: error if-no-files-found: error
@@ -204,6 +211,7 @@ jobs:
run: mv dist/TgWsProxy.exe dist/TgWsProxy_windows_arm64.exe run: mv dist/TgWsProxy.exe dist/TgWsProxy_windows_arm64.exe
- name: Upload unsigned artifact - name: Upload unsigned artifact
if: ${{ inputs.sign_windows }}
id: upload-unsigned id: upload-unsigned
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@v7
with: with:
@@ -213,6 +221,7 @@ jobs:
if-no-files-found: error if-no-files-found: error
- name: Sign EXE with SignPath - name: Sign EXE with SignPath
if: ${{ inputs.sign_windows }}
uses: signpath/github-action-submit-signing-request@v3 uses: signpath/github-action-submit-signing-request@v3
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@@ -224,11 +233,11 @@ jobs:
wait-for-completion: true wait-for-completion: true
output-artifact-directory: signed output-artifact-directory: signed
- name: Upload signed artifact - name: Upload Windows artifact
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@v7
with: with:
name: TgWsProxy-windows-arm64 name: TgWsProxy-windows-arm64
path: signed/TgWsProxy_windows_arm64.exe path: ${{ inputs.sign_windows && 'signed' || 'dist' }}/TgWsProxy_windows_arm64.exe
archive: true archive: true
if-no-files-found: error if-no-files-found: error
@@ -281,6 +290,7 @@ jobs:
run: mv dist/TgWsProxy.exe dist/TgWsProxy_windows_7_${{ matrix.suffix }}.exe run: mv dist/TgWsProxy.exe dist/TgWsProxy_windows_7_${{ matrix.suffix }}.exe
- name: Upload unsigned artifact - name: Upload unsigned artifact
if: ${{ inputs.sign_windows }}
id: upload-unsigned id: upload-unsigned
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@v7
with: with:
@@ -290,6 +300,7 @@ jobs:
if-no-files-found: error if-no-files-found: error
- name: Sign EXE with SignPath - name: Sign EXE with SignPath
if: ${{ inputs.sign_windows }}
uses: signpath/github-action-submit-signing-request@v3 uses: signpath/github-action-submit-signing-request@v3
with: with:
api-token: ${{ secrets.SIGNPATH_API_TOKEN }} api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
@@ -301,11 +312,11 @@ jobs:
wait-for-completion: true wait-for-completion: true
output-artifact-directory: signed output-artifact-directory: signed
- name: Upload signed artifact - name: Upload Windows artifact
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@v7
with: with:
name: TgWsProxy-win7-${{ matrix.suffix }} name: TgWsProxy-win7-${{ matrix.suffix }}
path: signed/TgWsProxy_windows_7_${{ matrix.suffix }}.exe path: ${{ inputs.sign_windows && 'signed' || 'dist' }}/TgWsProxy_windows_7_${{ matrix.suffix }}.exe
archive: true archive: true
if-no-files-found: error if-no-files-found: error