Mojtaba KarimiandClaude Opus 4.8 3163a5ee75 ci(windows): sign exe and installer with Azure Trusted Signing ...

Sign the bare .exe before the MSI is built (so the packed copy carries
the signature) and the linked .msi afterwards, via
azure/artifact-signing-action with SHA256 digests and Microsoft's
RFC3161 timestamp server. Credentials come from the AZURE_* repository
secrets.

Also fix the MSI version fallback: workflow_dispatch runs use the
branch name as ref_name, which is not a valid numeric ProductVersion,
so candle failed on any non-tag run.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-04 12:54:40 +02:00

..

release.yml

ci(windows): sign exe and installer with Azure Trusted Signing

2026-06-04 12:54:40 +02:00