Sign win executable

.github/workflows/alpha-artifacts.yml

@@ -15,6 +15,9 @@ jobs:
         runs-on: ${{ matrix.os }}
         env:
             TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}
+            AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
+            AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }}
+            AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
         steps:
             - name: Checkout repository
               uses: actions/checkout@v4
@@ -33,6 +36,11 @@ jobs:
               with:
                   workspaces: "./core -> target"
 
+            - name: Install trusted-signing-cli
+              if: matrix.NAME == 'windows'
+              run: |
+                  cargo install trusted-signing-cli
+
             - name: "Apple silicon target"
               if: matrix.NAME == 'mac'
               run: |

core/tauri.conf.json

@@ -2,6 +2,7 @@
 	"build": {
 		"beforeBuildCommand": "npm run build:bundle",
 		"beforeDevCommand": "npm run server",
+		"beforeBundleCommand": "npm run sign",
 		"devPath": "http://localhost:3000",
 		"distDir": "../dist"
 	},

package.json

@@ -16,6 +16,7 @@
 		"setup": "node scripts/buildNumber.cjs alpha false && node scripts/build.js",
 		"rename": "node scripts/rename.js",
 		"check": "svelte-check && tsc --noEmit && eslint .",
+		"sign": "node scripts/sign.js",
 		"tauri": "tauri"
 	},
 	"workspaces": [

scripts/sign.js

@@ -0,0 +1,12 @@
+import { exec } from "child_process"
+import { platform } from "os"
+
+if (platform() === "win32") {
+	exec("trusted-signing-cli -f ./core/target/release/Authme.exe -e https://eus.codesigning.azure.net -c mnr -n Profile1", (error, stdout) => {
+		if (error) {
+			return console.error(`Error: ${error}`)
+		}
+
+		console.log(`Result: ${stdout}`)
+	})
+}