ci: use newer sign tool for windows

The electron forge one won't support azure trusted account signing
2026-04-15 12:12:13 -07:00
parent 772d8cf3e1
commit 6755ab9a1b
2 changed files with 29 additions and 15 deletions
@@ -53,6 +53,16 @@ jobs:
          "AZURE_DLIB_PATH=$dlib" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8
          "AZURE_METADATA_JSON_PATH=$env:GITHUB_WORKSPACE\js\build\signing-metadata.json" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8

+      - name: Locate signtool.exe
+        shell: pwsh
+        working-directory: .
+        run: |
+          $signtool = Get-ChildItem "C:\Program Files (x86)\Windows Kits\10\bin\*\x64\signtool.exe" -ErrorAction SilentlyContinue |
+            Sort-Object FullName -Descending |
+            Select-Object -First 1
+          if (-not $signtool) { throw "signtool.exe not found in Windows Kits" }
+          "SIGNTOOL_PATH=$($signtool.FullName)" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8
+
      - name: Authenticate to Google Cloud
        uses: google-github-actions/auth@v2
        with: