@@ -134,7 +134,7 @@ jobs:
134
134
- name : Install Java
135
135
uses : actions/setup-java@v4
136
136
with :
137
- java-version : ' 17'
137
+ java-version : ' 17.0.8 '
138
138
distribution : ' temurin'
139
139
architecture : ${{ matrix.arch }}
140
140
- name : Setup Gradle
@@ -153,6 +153,22 @@ jobs:
153
153
ORG_GRADLE_PROJECT_compose.desktop.mac.notarization.password : ${{ secrets.PROCESSING_APP_PASSWORD }}
154
154
ORG_GRADLE_PROJECT_compose.desktop.mac.notarization.teamID : ${{ secrets.PROCESSING_TEAM_ID }}
155
155
ORG_GRADLE_PROJECT_snapname : ${{ vars.SNAP_NAME }}
156
+
157
+ - name : Sign files with Trusted Signing
158
+ if : runner.os == 'Windows'
159
+ uses : azure/trusted-signing-action@v0
160
+ with :
161
+ azure-tenant-id : ${{ secrets.AZURE_TENANT_ID }}
162
+ azure-client-id : ${{ secrets.AZURE_CLIENT_ID }}
163
+ azure-client-secret : ${{ secrets.AZURE_CLIENT_SECRET }}
164
+ endpoint : https://eus.codesigning.azure.net/
165
+ trusted-signing-account-name : ${{ secrets.AZURE_SIGNING_ACCOUNT_NAME }}
166
+ certificate-profile-name : ${{ secrets.AZURE_CERTIFICATE_PROFILE_NAME }}
167
+ files-folder : app/build/compose/binaries/main/msi
168
+ files-folder-filter : msi
169
+ file-digest : SHA256
170
+ timestamp-rfc3161 : http://timestamp.acs.microsoft.com
171
+ timestamp-digest : SHA256
156
172
157
173
- name : Upload portables to release
158
174
uses : svenstaro/upload-release-action@v2
@@ -173,3 +189,5 @@ jobs:
173
189
run : snapcraft upload --release=beta app/build/compose/binaries/main/${{ matrix.binary }}.${{ matrix.extension }}
174
190
env :
175
191
SNAPCRAFT_STORE_CREDENTIALS : ${{ secrets.PROCESSING_SNAPCRAFT_TOKEN }}
192
+
193
+
0 commit comments