Update from docs, back to inherit
This commit is contained in:
		
							
								
								
									
										13
									
								
								.github/workflows/build-apps.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										13
									
								
								.github/workflows/build-apps.yml
									
									
									
									
										vendored
									
									
								
							@ -188,23 +188,24 @@ jobs:
 | 
			
		||||
      - name: Prepare certificate and variables (Windows only)
 | 
			
		||||
        if: ${{ (env.IS_RELEASE == 'true' || env.IS_NIGHTLY == 'true') && matrix.os == 'windows-2022' }}
 | 
			
		||||
        run: |
 | 
			
		||||
          echo "${{secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/Certificate_pkcs12.p12
 | 
			
		||||
          cat /d/Certificate_pkcs12.p12
 | 
			
		||||
          echo "::set-output name=version::${GITHUB_REF#refs/tags/v}"
 | 
			
		||||
          echo "${{ secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/Certificate_pkcs12.p12
 | 
			
		||||
          echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
 | 
			
		||||
          echo "KEYPAIR_NAME=gt-standard-keypair" >> $GITHUB_OUTPUT
 | 
			
		||||
          echo "CERTIFICATE_NAME=gt-certificate" >> $GITHUB_OUTPUT
 | 
			
		||||
          echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV"
 | 
			
		||||
          echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV"
 | 
			
		||||
          echo "SM_CLIENT_CERT_FILE=D:\\Certificate_pkcs12.p12" >> "$GITHUB_ENV"
 | 
			
		||||
          echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> "$GITHUB_ENV"
 | 
			
		||||
          echo "C:\Program Files (x86)\Windows Kits\10\App Certification Kit" >> $GITHUB_PATH
 | 
			
		||||
          echo "C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools" >> $GITHUB_PATH
 | 
			
		||||
          echo "C:\Program Files\DigiCert\DigiCert One Signing Manager Tools" >> $GITHUB_PATH
 | 
			
		||||
          echo "C:\Program Files\DigiCert\DigiCert Keylocker Tools" >> $GITHUB_PATH
 | 
			
		||||
        shell: bash
 | 
			
		||||
 | 
			
		||||
      - name: Setup certicate with SSM KSP (Windows only)
 | 
			
		||||
        if: ${{ (env.IS_RELEASE == 'true' || env.IS_NIGHTLY == 'true') && matrix.os == 'windows-2022' }}
 | 
			
		||||
        run: |
 | 
			
		||||
          curl -X GET  https://one.digicert.com/signingmanager/api-ui/v1/releases/smtools-windows-x64.msi/download -H "x-api-key:%SM_API_KEY%" -o smtools-windows-x64.msi
 | 
			
		||||
          msiexec /i smtools-windows-x64.msi /quiet /qn
 | 
			
		||||
          curl -X GET  https://one.digicert.com/signingmanager/api-ui/v1/releases/Keylockertools-windows-x64.msi/download -H "x-api-key:%SM_API_KEY%" -o Keylockertools-windows-x64.msi
 | 
			
		||||
          msiexec /i Keylockertools-windows-x64.msi /quiet /qn
 | 
			
		||||
          smksp_registrar.exe list
 | 
			
		||||
          smctl.exe keypair ls
 | 
			
		||||
          C:\Windows\System32\certutil.exe -csp "DigiCert Signing Manager KSP" -key -user
 | 
			
		||||
 | 
			
		||||
@ -27,7 +27,7 @@ exports.default = async (configuration) => {
 | 
			
		||||
      `smctl sign --fingerprint="${process.env.WINDOWS_CERTIFICATE_THUMBPRINT
 | 
			
		||||
      }" --input "${String(configuration.path)}"`,
 | 
			
		||||
      {
 | 
			
		||||
        stdio: 'pipe',
 | 
			
		||||
        stdio: 'inherit',
 | 
			
		||||
      }
 | 
			
		||||
    )
 | 
			
		||||
    console.log('Signing using signWin.js script: successful')
 | 
			
		||||
 | 
			
		||||
		Reference in New Issue
	
	Block a user