Files
OpenBB/desktop/src-tauri/scripts/sign.ps1
Danglewood 6460b23709 [Feature] Configure Tauri Updater for ODP Desktop Latest Release Tag (#7240)
* configure the updater and some fix some macos tahoe css errors

* enclosure for title_bar_style on Window build

* those should have been added to the commit

* test update to 0.6.0

* allow unused mut

* update version in tauri.conf

* fix versioned release draft

* fix windows beforeBundle script

* force app restart on update

* fix release build

* fix latest tag files

* latest tag title

* try testing for windows ARM

* improve build workflow cleanup for cache

* actually use the windows-11-arm runner

* copy and bundle openssl items directly from runner

* we actually need those files as placeholders for linters and unit tests

* no need to rebuild assets when converting draft to published

* fix verbosity

* fix windows openssl dir

* converting draft release to published should not run the build workflows

* converting draft release to published should not run the build workflows

* separate release draft build from publish

* release dekstop dispatch

* release dekstop dispatch

* fix dylibs

* undo fix_dylib change and attempt to handle restart on update

* move restart exit code up

* bump version to test updater restarting

* windows updater signature

* positional argument..?

* arg is --password

* try this for mac updater

* add message to updater to inform users to start the app manually after update

* add toast message for first API run

* get windows to open the window after updating..?

* cargo clippy

* update package locks for vite

* fix css thing

* version bump for another test

* bump for v 1

---------

Co-authored-by: deeleeramone <>
2025-10-22 15:56:03 +00:00

22 lines
1.1 KiB
PowerShell
Vendored

# Download and set up CodeSignTool
$toolDir = Join-Path $env:GITHUB_WORKSPACE "codesigntool"
New-Item -ItemType Directory -Force -Path $toolDir
$zipPath = Join-Path $toolDir "CodeSignTool.zip"
Invoke-WebRequest -Uri "https://github.com/SSLcom/CodeSignTool/releases/download/v1.3.1/CodeSignTool-v1.3.1-windows.zip" -OutFile $zipPath
Expand-Archive -Path $zipPath -DestinationPath $toolDir -Force
$codeSignToolPath = Join-Path $toolDir "CodeSignTool.bat"
# Find all binaries in the root of the release directory
$targetDir = Join-Path $env:GITHUB_WORKSPACE "desktop/target/x86_64-pc-windows-msvc/release"
$filesToSign = Get-ChildItem -Path $targetDir -Include *.exe, *.dll
# Sign each file individually
foreach ($file in $filesToSign) {
Write-Host "Signing $($file.FullName)..."
& $codeSignToolPath sign -username="$($env:ESIGNER_USERNAME)" -password="$($env:ESIGNER_PASSWORD)" -credential_id="$($env:ESIGNER_CREDENTIAL_ID)" -totp_secret="$($env:ESIGNER_TOTP_SECRET)" -file_path="$($file.FullName)" -malware_block="true"
if ($LASTEXITCODE -ne 0) {
Write-Error "Failed to sign $($file.FullName)"
exit 1
}
}