-
Notifications
You must be signed in to change notification settings - Fork 2
52 lines (47 loc) · 1.79 KB
/
digicert-signing.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
name: digicert-signing
on:
pull_request:
push:
branches:
- main
- 'releases/*'
jobs:
sign:
runs-on: windows-2022
steps:
- name: Copy libraries
shell: cmd
run: |
dir
mkdir files
copy C:\Windows\System32\wmp.dll files
cd files
mkdir subdirectory
copy C:\Windows\System32\wmp.dll subdirectory
- name: Setup Certificate
run: |
echo "${{secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/cognite_code_signing_github_actions.p12
shell: bash
- name: Set variables
id: variables
run: |
echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV"
echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV"
echo "SM_CLIENT_CERT_FILE=D:\\cognite_code_signing_github_actions.p12" >> "$GITHUB_ENV"
echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> "$GITHUB_ENV"
echo "SM_CODE_SIGNING_CERT_SHA1_HASH=${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }}" >> "$GITHUB_ENV"
shell: bash
- name: Code signing with Secure Software Manager
uses: digicert/[email protected]
env:
SM_API_KEY: ${{secrets.SM_API_KEY}}
SM_CLIENT_CERT_PASSWORD: ${{secrets.SM_CLIENT_CERT_PASSWORD}}
SM_CLIENT_CERT_FILE: ${{secrets.SM_CLIENT_CERT_FILE}}
- name: Sign with smctl
env:
GITHUB_WORKSPACE: ${{ github.workspace }}
run: |
smctl windows certsync --keypair-alias="key_464138416"
smctl sign --fingerprint ${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }} --input "${{ env.GITHUB_WORKSPACE }}\files\wmp.dll"
smctl sign verify --input "${{ env.GITHUB_WORKSPACE }}\files\wmp.dll"
shell: cmd