Migrate to signpath.io

Author: Hacksore

.github/workflows/release.yaml

@@ -40,16 +40,16 @@ jobs:
       fail-fast: false
       matrix:
         settings:
-          - host: macos-latest
-            target: universal-apple-darwin
-            toolchain: aarch64-apple-darwin,x86_64-apple-darwin
-            bundles: app,dmg
-            os: darwin
-          - host: windows-latest
-            target: x86_64-pc-windows-msvc
-            toolchain: x86_64-pc-windows-msvc
-            bundles: msi,nsis
-            os: windows
+          # - host: macos-latest
+          #   target: universal-apple-darwin
+          #   toolchain: aarch64-apple-darwin,x86_64-apple-darwin
+          #   bundles: app,dmg
+          #   os: darwin
+          # - host: windows-latest
+          #   target: x86_64-pc-windows-msvc
+          #   toolchain: x86_64-pc-windows-msvc
+          #   bundles: msi,nsis
+          #   os: windows
           - host: ubuntu-latest
             target: x86_64-unknown-linux-gnu
             toolchain: x86_64-unknown-linux-gnu
@@ -120,21 +120,41 @@ jobs:
         run: |
           ls -hal binaries
           sha1sum binaries/*
-      - name: Sign Windows Binaries
-        run: |
-          echo "Starting code sign for windows bins..."
-          docker run -v "./binaries:/code/binaries" ghcr.io/sslcom/codesigner:latest batch_sign \
-            -username=${ES_USERNAME} \
-            -password=${ES_PASSWORD} \
-            -credential_id=${ES_CREDENTIAL_ID} \
-            -totp_secret=${ES_TOTP_SECRET} \
-            -input_dir_path="/code/binaries" \
-            -output_dir_path="/code/binaries/signed"
-        env:
-          ES_USERNAME: "${{ secrets.ES_USERNAME }}"
-          ES_PASSWORD: "${{ secrets.ES_PASSWORD }}"
-          ES_CREDENTIAL_ID: "${{ secrets.ES_CREDENTIAL_ID }}"
-          ES_TOTP_SECRET: "${{ secrets.ES_TOTP_SECRET }}"
+      - name: upload-unsigned-artifact
+        id: upload-unsigned-artifact
+        uses: actions/upload-artifact@v4
+        with: 
+          path: ./binaries
+      # - name: Sign Windows Binaries
+      #   uses: signpath/[email protected]
+      #   with:
+      #     api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
+      #     organization-id: '<SignPath organization id>'
+      #     project-slug: '<SignPath project slug>'
+      #     signing-policy-slug: '<SignPath signing policy slug>'
+      #     github-artifact-id: '${{ steps.upload-unsigned-artifact.outputs.artifact-id }}'
+      #     wait-for-completion: true
+      #     output-artifact-directory: 'binaries/signed'
+      #     parameters: |
+      #       version: ${{ toJSON(some.userinput) }}
+      #       myparam: "another param"
+      # FIXME: this was the old code
+      # - name: Sign Windows Binaries
+      #   run: |
+      #     echo "Starting code sign for windows bins..."
+      #     docker run -v "./binaries:/code/binaries" ghcr.io/sslcom/codesigner:latest batch_sign \
+      #       -username=${ES_USERNAME} \
+      #       -password=${ES_PASSWORD} \
+      #       -credential_id=${ES_CREDENTIAL_ID} \
+      #       -totp_secret=${ES_TOTP_SECRET} \
+      #       -input_dir_path="/code/binaries" \
+      #       -output_dir_path="/code/binaries/signed"
+      #   env:
+      #     ES_USERNAME: "${{ secrets.ES_USERNAME }}"
+      #     ES_PASSWORD: "${{ secrets.ES_PASSWORD }}"
+      #     ES_CREDENTIAL_ID: "${{ secrets.ES_CREDENTIAL_ID }}"
+      #     ES_TOTP_SECRET: "${{ secrets.ES_TOTP_SECRET }}"
+
       - name: Postsign
         run: |
           ls -hal binaries/signed