Files
ForgeFlow/scripts/signed-electron-builder-config.cjs
T
NuklearRabbit 18f42621c2
ForgeFlow quality gate / quality (push) Canceled after 0s
feat: harden release signing and coverage gate
2026-07-29 22:54:51 +02:00

23 lines
819 B
JavaScript

"use strict";
const pkg = require("../package.json");
const expectedPublisher = String(process.env.FORGEFLOW_EXPECTED_PUBLISHER || "").trim();
const commonName = expectedPublisher.match(/^CN=([^,]+)/i)?.[1]?.trim();
const useAzure = Boolean(String(process.env.FORGEFLOW_AZURE_SIGNING_ENDPOINT || "").trim());
const win = { ...pkg.build.win, forceCodeSigning: true };
if (useAzure) {
win.azureSignOptions = {
publisherName: commonName,
endpoint: process.env.FORGEFLOW_AZURE_SIGNING_ENDPOINT,
codeSigningAccountName: process.env.FORGEFLOW_AZURE_SIGNING_ACCOUNT,
certificateProfileName: process.env.FORGEFLOW_AZURE_CERTIFICATE_PROFILE,
fileDigest: "SHA256",
timestampDigest: "SHA256",
timestampRfc3161: "http://timestamp.acs.microsoft.com",
};
}
module.exports = { ...pkg.build, win };