download-windows-x64.exeをコード署名する (VOICEVOX#412)

Resolves VOICEVOX#403
sevenc-nanashi · Feb 2, 2023 · 8c31436 · 8c31436
1 parent 5fcc94b
commit 8c31436
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/build_and_deploy.yml b/.github/workflows/build_and_deploy.yml
@@ -193,6 +193,7 @@ jobs:
             scripts/downloads/*
           target_commitish: ${{ github.sha }}
   deploy_precompiled_downloader:
+    environment: ${{ github.event.inputs.code_signing == 'true' && 'code_signing' || '' }} # コード署名用のenvironment
     strategy:
       matrix:
         include:
@@ -234,6 +235,14 @@ jobs:
             Linux | macOS) exe_suffix=;;
           esac
           mv $"target/${{ matrix.target }}/release/download$exe_suffix" ./${{ matrix.name }}
+      - name: Code signing (Windows)
+        if: startsWith(matrix.os, 'windows') && github.event.inputs.code_signing == 'true'
+        shell: bash
+        run: |
+          bash build_util/codesign.bash ./${{ matrix.name }}
+        env:
+          CERT_BASE64: ${{ secrets.CERT_BASE64 }}
+          CERT_PASSWORD: ${{ secrets.CERT_PASSWORD }}
       - name: Upload to Release
         if: env.VERSION != 'DEBUG' && env.SKIP_UPLOADING_RELEASE_ASSET == '0'
         uses: softprops/action-gh-release@v1