Try new Windows codes signing cert + KeyLocker process.

lando · Apr 23, 2024 · 51ed7ab · 51ed7ab
1 parent 324564c
commit 51ed7ab
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 1 deletion.
diff --git a/.github/workflows/pr-release-tests-slim.yml b/.github/workflows/pr-release-tests-slim.yml
@@ -127,6 +127,9 @@ jobs:
           apple-notary-password: ${{ secrets[matrix.apple-notary-password] }}
           apple-product-id: ${{ matrix.apple-product-id }}
           apple-team-id: ${{ matrix.apple-team-id }}
+          keylocker-host: https://clientauth.one.digicert.com
+          keylocker-api-key: ${{ secrets.KEYLOCKER_API_KEY }}
+          keylocker-cert-sha1-hash: ${{ secrets.KEYLOCKER_CERT_SHA1_HASH }}
           options: ${{ matrix.options }}
       - name: Rename as needed
         shell: bash

diff --git a/.github/workflows/release-slim.yml b/.github/workflows/release-slim.yml
@@ -117,7 +117,7 @@ jobs:
           name: ${{ matrix.key }}
           path: lando
       - name: Sign and Notarize
-        uses: lando/code-sign-action@v2
+        uses: lando/code-sign-action@windows-cert-keylocker
         id: code-sign-action
         with:
           file: ${{ matrix.file }}
@@ -127,6 +127,9 @@ jobs:
           apple-notary-password: ${{ secrets[matrix.apple-notary-password] }}
           apple-product-id: ${{ matrix.apple-product-id }}
           apple-team-id: ${{ matrix.apple-team-id }}
+          keylocker-host: https://clientauth.one.digicert.com
+          keylocker-api-key: ${{ secrets.KEYLOCKER_API_KEY }}
+          keylocker-cert-sha1-hash: ${{ secrets.KEYLOCKER_CERT_SHA1_HASH }}
           options: ${{ matrix.options }}
       - name: Rename as needed
         shell: bash

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -131,6 +131,9 @@ jobs:
           apple-notary-password: ${{ secrets[matrix.apple-notary-password] }}
           apple-product-id: ${{ matrix.apple-product-id }}
           apple-team-id: ${{ matrix.apple-team-id }}
+          keylocker-host: https://clientauth.one.digicert.com
+          keylocker-api-key: ${{ secrets.KEYLOCKER_API_KEY }}
+          keylocker-cert-sha1-hash: ${{ secrets.KEYLOCKER_CERT_SHA1_HASH }
           options: ${{ matrix.options }}
       - name: Rename as needed
         shell: bash