Attempt to sign

Author: pylessard

.github/workflows/scrutiny-app.yml

@@ -94,16 +94,44 @@ jobs:
 
       # Launch Nuitka
       - name: Nuitka build
-        run: ./scripts/nuitka_build.sh
+        run: ./scripts/nuitka_build.sh build
         shell: bash
 
+      - name: Sign Executable
+      - uses: sslcom/esigner-codesign@develop
+        with:
+          command: sign
+          username: ${{secrets.CODESIGN_USERNAME}}
+          password: ${{secrets.CODESIGN_PASSWORD}}
+          credential_id: ${{secrets.CODESIGN_CREDENTIAL_ID}}
+          totp_secret: ${{secrets.CODESIGN_TOTP_SECRET}}
+          file_path: ./build/scrutiny.dist/scrutiny.exe
+          override: true
+          clean_logs: true
+      
       # Launch InnoSetup
       - name: InnoSetup packaging
-        run: ./scripts/make_windows_installer.sh
+        run: ./scripts/make_windows_installer.sh build
         shell: bash
 
+      - name: Get Installer Name
+        run: |
+          echo "INSTALLER_NAME=$(./make_windows_installer_name.sh)" >> $GITHUB_ENV
+
+      - name: Sign Installer
+      - uses: sslcom/esigner-codesign@develop
+        with:
+          command: sign
+          username: ${{secrets.CODESIGN_USERNAME}}
+          password: ${{secrets.CODESIGN_PASSWORD}}
+          credential_id: ${{secrets.CODESIGN_CREDENTIAL_ID}}
+          totp_secret: ${{secrets.CODESIGN_TOTP_SECRET}}
+          file_path: ./build/installer/${{ env.INSTALLER_NAME }}.exe
+          override: true
+          clean_logs: true
+
       - name: Upload Artifact
         uses: actions/upload-artifact@v4
         with:
           name: Windows installer ${{ github.ref_name }}
-          path: ./nuitka_build/installer/*.exe
+          path: ./build/installer/${{ env.INSTALLER_NAME }}.exe

scripts/make_windows_installer.sh

@@ -28,7 +28,7 @@ SCRUTINY_VERSION=$( ${SOURCE_DIR}/scrutiny.exe version --format short )
 
 info "Scrutiny version: $SCRUTINY_VERSION"
 assert_scrutiny_version_format "$SCRUTINY_VERSION"
-PKG_NAME="scrutinydebugger_v${SCRUTINY_VERSION}_$(uname -m)_setup"
+PKG_NAME=$(./scripts/make_windows_installer_name.sh)
 
 cp ${PROJECT_ROOT}/deploy/windows/scrutiny.ico ${SOURCE_DIR}/
 

scripts/make_windows_installer_name.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -euo pipefail
+source $(dirname ${BASH_SOURCE[0]})/common.sh
+
+# Find project root
+NUITKA_OUTPUT=$(dir_with_default ${1:-""} "nuitka_build")
+PROJECT_ROOT="$(get_project_root)"
+SOURCE_DIR="${NUITKA_OUTPUT}/scrutiny.dist"
+
+cd ${PROJECT_ROOT}
+
+assert_dir "$SOURCE_DIR"
+
+SCRUTINY_VERSION=$( ${SOURCE_DIR}/scrutiny.exe version --format short )
+
+assert_scrutiny_version_format "$SCRUTINY_VERSION"
+PKG_NAME="scrutinydebugger_v${SCRUTINY_VERSION}_$(uname -m)_setup"
+echo ${PKG_NAME}