1 file changed
+26
-1
.github/workflows/release-windows-microsoft-store.yml
+26
-1
@@ -101,6 +101,30 @@ jobs:
101
- name: Setup MSVC developer environment
102
uses: ilammy/msvc-dev-cmd@v1
103
104
+ # Fail before the long Windows build if SSL.com signing credentials are
105
+ # not available to this run. GitHub substitutes absent secrets as empty
106
+ # strings, which otherwise surfaces only after the artifacts are built.
107
+ - name: Validate code-signing secrets
108
+ shell: pwsh
109
+ env:
110
+ ES_USERNAME: ${{ secrets.ES_USERNAME }}
111
+ ES_PASSWORD: ${{ secrets.ES_PASSWORD }}
112
+ ES_CREDENTIAL_ID: ${{ secrets.ES_CREDENTIAL_ID }}
113
+ ES_TOTP_SECRET: ${{ secrets.ES_TOTP_SECRET }}
114
+ run: |
115
+ $required = @(
116
+ "ES_USERNAME",
117
+ "ES_PASSWORD",
118
+ "ES_CREDENTIAL_ID",
119
+ "ES_TOTP_SECRET"
120
+ )
121
+ $missing = $required | Where-Object {
122
+ [string]::IsNullOrWhiteSpace([Environment]::GetEnvironmentVariable($_))
123
+ }
124
+ if ($missing.Count -gt 0) {
125
+ throw "Missing required GitHub Actions secret(s): $($missing -join ', '). Configure them under Settings > Secrets and variables > Actions."
126
+ }
127
+
128
- name: Build App
129
shell: pwsh
130
run: |
@@ -114,7 +138,8 @@ jobs:
138
Move-Item "${env:GITHUB_WORKSPACE}\src-tauri\target\release\bundle\nsis\*" "${env:GITHUB_WORKSPACE}\src-tauri\target\release\bundle\to-sign\" -Force
139
140
- name: Sign Artifact with CodeSignTool
117
- uses: sslcom/esigner-codesign@develop
141
+ uses: sslcom/esigner-codesign@v1.3.2
142
+ timeout-minutes: 20
143
with:
144
command: batch_sign
145
username: ${{ secrets.ES_USERNAME }}