feat: sign tauri plugins (#450)

fix: sign tauri plugins in ci
thewh1teagle · Dec 18, 2024 · 1f67827 · 1f67827
1 parent b268b2a
commit 1f67827
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -69,6 +69,16 @@ jobs:
                 $signtoolPath = (Get-ChildItem "C:\Program Files (x86)\Windows Kits\10\bin\" -Filter "signtool.exe" -Recurse | Where-Object FullName -like "*\x64\signtool.exe" | Select-Object -First 1).FullName
                 &$signtoolPath sign /f cert.pfx /p $env:WINDOWS_CERTIFICATE_PASSWORD /tr http://timestamp.digicert.com /td sha256 /fd sha256 desktop\src-tauri\ffmpeg\bin\x64\*
 
+                # Sign tauri plugin DLLs
+                # TODO: remove once https://github.com/tauri-apps/tauri/pull/11676 merged
+                C:\msys64\usr\bin\wget.exe https://github.com/tauri-apps/binary-releases/releases/download/nsis-3/nsis-3.zip
+                Expand-Archive nsis-3.zip
+                Move-Item nsis-3\nsis-3.08 "$env:localappdata\tauri\NSIS"
+                Get-ChildItem -Path "$env:LOCALAPPDATA\tauri\NSIS\Plugins" -Filter '*.dll' -Recurse | ForEach-Object { 
+                  &$signtoolPath sign /f cert.pfx /p $env:WINDOWS_CERTIFICATE_PASSWORD /tr http://timestamp.digicert.com /td sha256 /fd sha256 $_.FullName
+                }
+
+
             - name: Build
               uses: tauri-apps/tauri-action@v0
               env: