98f7ec0b63
This is a change based on PR discussion about ensuring the sign script fails if signtool errors, passing the last exit code from the called command as the result of the script. For more information, see https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_automatic_variables?view=powershell-7.4#lastexitcode
17 lines
569 B
PowerShell
17 lines
569 B
PowerShell
#!/usr/bin/env pwsh
|
|
|
|
if ($null -eq $Env:DLIB_PATH) {
|
|
Write-Host "Skipping Windows code signing; DLIB_PATH not set"
|
|
exit
|
|
}
|
|
|
|
if ($null -eq $Env:METADATA_PATH) {
|
|
Write-Host "Skipping Windows code signing; METADATA_PATH not set"
|
|
exit
|
|
}
|
|
|
|
$signtool = Resolve-Path "C:\Program Files (x86)\Windows Kits\10\bin\*\x64\signtool.exe" | Select-Object -Last 1
|
|
Write-Host "Using signtool from $signtool"
|
|
|
|
& $signtool sign /d "GitHub CLI" /fd sha256 /td sha256 /tr http://timestamp.acs.microsoft.com /v /dlib "$Env:DLIB_PATH" /dmdf "$Env:METADATA_PATH" $Args[0]
|
|
exit $LASTEXITCODE
|