mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
9cab250696
Refs #3230 It looks like we need to sign the internal exe before it gets bundled too. We can use `beforeBundleCommand` to do so. Soon, Tauri should have native support for this exact scenario: https://github.com/tauri-apps/tauri/pull/8718
17 lines
536 B
Bash
Executable File
17 lines
536 B
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
if ! command -v AzureSignTool &>/dev/null; then
|
|
echo "AzureSignTool not installed. Signing will be skipped."
|
|
exit
|
|
fi
|
|
|
|
AzureSignTool sign \
|
|
--azure-key-vault-url "$AZURE_KEY_VAULT_URI" \
|
|
--azure-key-vault-client-id "$AZURE_CLIENT_ID" \
|
|
--azure-key-vault-tenant-id "$AZURE_TENANT_ID" \
|
|
--azure-key-vault-client-secret "$AZURE_CLIENT_SECRET" \
|
|
--azure-key-vault-certificate "$AZURE_CERT_NAME" \
|
|
--timestamp-rfc3161 "http://timestamp.digicert.com" \
|
|
--verbose "$1"
|