From a797ada579b4e3b32e9b3d01a0ab8b34bffe8b22 Mon Sep 17 00:00:00 2001
From: Tim Eves <tim-eves@users.noreply.github.com>
Date: Thu, 10 Oct 2024 14:01:34 +0700
Subject: [PATCH] Use the trusted-signing-service in
 build-test-installer-release.yml

Switch from the codesign v2 reusable workflow to the v3 trusted-signing-action.
---
 .../build-test-installer-release.yml          | 34 +++++--------------
 1 file changed, 8 insertions(+), 26 deletions(-)

diff --git a/.github/workflows/build-test-installer-release.yml b/.github/workflows/build-test-installer-release.yml
index f70c83dc..5f8f9821 100644
--- a/.github/workflows/build-test-installer-release.yml
+++ b/.github/workflows/build-test-installer-release.yml
@@ -90,37 +90,19 @@ jobs:
       - name: list files
         run: dir Install/Output/
 
-      - name: Upload installer
-        uses: actions/upload-artifact@v4
+      - name: Sign installer
+        if: startsWith(github.ref, 'refs/tags/v')
+        uses: sillsdev/codesign/trusted-signing-action@v3
         with:
-          name: SpeechAnalyzerInstaller
-          path: Install/Output/SpeechAnalyzer*.exe
-
-  sign-installer:
-    name: Sign installer
-    needs: build-installer
-    if: startsWith(github.ref, 'refs/tags/v')
-    uses: sillsdev/codesign/.github/workflows/sign.yml@v2
-    with:
-      artifact: SpeechAnalyzerInstaller
-    secrets:
-      certificate: ${{ secrets.CODESIGN_LSDEVSECTIGOEV }}
-
-  create-release:
-    name: Create Release
-    needs: sign-installer
-    if: startsWith(github.ref, 'refs/tags/v')
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          name: SpeechAnalyzerInstaller
+          credentials: ${{ secrets.TRUSTED_SIGNING_CREDENTIALS }}
+          files-folder: Install/Output
+          files-folder-filter: exe
 
       - name: Create Release
+        if: startsWith(github.ref, 'refs/tags/v')
         uses: softprops/action-gh-release@v2
         with:
-          files: SpeechAnalyzer*.exe
+          files: Install/Output/SpeechAnalyzer*.exe
           body: |
             Release for version ${{ github.ref }}
           draft: true