@@ -134,7 +134,7 @@ jobs:
134134 - name : Install Java
135135 uses : actions/setup-java@v4
136136 with :
137- java-version : ' 17'
137+ java-version : ' 17.0.8 '
138138 distribution : ' temurin'
139139 architecture : ${{ matrix.arch }}
140140 - name : Setup Gradle
@@ -153,6 +153,22 @@ jobs:
153153 ORG_GRADLE_PROJECT_compose.desktop.mac.notarization.password : ${{ secrets.PROCESSING_APP_PASSWORD }}
154154 ORG_GRADLE_PROJECT_compose.desktop.mac.notarization.teamID : ${{ secrets.PROCESSING_TEAM_ID }}
155155 ORG_GRADLE_PROJECT_snapname : ${{ vars.SNAP_NAME }}
156+
157+ - name : Sign files with Trusted Signing
158+ if : runner.os == 'Windows'
159+ uses : azure/trusted-signing-action@v0
160+ with :
161+ azure-tenant-id : ${{ secrets.AZURE_TENANT_ID }}
162+ azure-client-id : ${{ secrets.AZURE_CLIENT_ID }}
163+ azure-client-secret : ${{ secrets.AZURE_CLIENT_SECRET }}
164+ endpoint : https://eus.codesigning.azure.net/
165+ trusted-signing-account-name : ${{ secrets.AZURE_SIGNING_ACCOUNT_NAME }}
166+ certificate-profile-name : ${{ secrets.AZURE_CERTIFICATE_PROFILE_NAME }}
167+ files-folder : app/build/compose/binaries/main/msi
168+ files-folder-filter : msi
169+ file-digest : SHA256
170+ timestamp-rfc3161 : http://timestamp.acs.microsoft.com
171+ timestamp-digest : SHA256
156172
157173 - name : Upload portables to release
158174 uses : svenstaro/upload-release-action@v2
@@ -173,3 +189,5 @@ jobs:
173189 run : snapcraft upload --release=beta app/build/compose/binaries/main/${{ matrix.binary }}.${{ matrix.extension }}
174190 env :
175191 SNAPCRAFT_STORE_CREDENTIALS : ${{ secrets.PROCESSING_SNAPCRAFT_TOKEN }}
192+
193+
0 commit comments