Skip to content

[SEC-2913] Update action to fit the new code signing flow #115

[SEC-2913] Update action to fit the new code signing flow

[SEC-2913] Update action to fit the new code signing flow #115

name: digicert-signing
on:
pull_request:
push:
branches:
- main
- 'releases/*'
jobs:
sign:
runs-on: windows-2022
steps:
- name: Copy libraries
shell: cmd
run: |
dir
mkdir files
copy C:\Windows\System32\wmp.dll files
cd files
mkdir subdirectory
copy C:\Windows\System32\wmp.dll subdirectory
- name: Setup Certificate
run: |
echo "${{secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/cognite_code_signing_github_actions.p12
shell: bash
- name: Set variables
id: variables
run: |
echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV"
echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV"
echo "SM_CLIENT_CERT_FILE=D:\\cognite_code_signing_github_actions.p12" >> "$GITHUB_ENV"
echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> "$GITHUB_ENV"
echo "SM_CODE_SIGNING_CERT_SHA1_HASH=${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }}" >> "$GITHUB_ENV"
shell: bash
- name: Code signing with Secure Software Manager
uses: digicert/[email protected]
env:
SM_API_KEY: ${{secrets.SM_API_KEY}}
SM_CLIENT_CERT_PASSWORD: ${{secrets.SM_CLIENT_CERT_PASSWORD}}
SM_CLIENT_CERT_FILE: ${{secrets.SM_CLIENT_CERT_FILE}}
- name: Sign with smctl
env:
GITHUB_WORKSPACE: ${{ github.workspace }}
run: |
smctl windows certsync --keypair-alias="key_464138416"
smctl sign --fingerprint ${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }} --input "${{ env.GITHUB_WORKSPACE }}\files\wmp.dll"
smctl sign verify --input "${{ env.GITHUB_WORKSPACE }}\files\wmp.dll"
shell: cmd