SignPath's action is ready, we have a certificate, and #4188 created a helper build target to collect assets for signing. The next step toward signing releases is updating our workflows.
Changes
Now build.yml uses the build target from #4188 to upload an artifact containing the assets we need to sign for the Release configuration
Now sign.yml is created to retrieve that artifact, get it signed, and upload a new signed artifact with the results
Now release.yml calls sign.yml to generate signed assets for releases
Now deploy.yml calls sign.yml to generate signed assets for uploading dev builds
Motivation
SignPath's action is ready, we have a certificate, and #4188 created a helper build target to collect assets for signing. The next step toward signing releases is updating our workflows.
Changes
build.ymluses the build target from #4188 to upload an artifact containing the assets we need to sign for the Release configurationsign.ymlis created to retrieve that artifact, get it signed, and upload a newsignedartifact with the resultsrelease.ymlcallssign.ymlto generate signed assets for releasesdeploy.ymlcallssign.ymlto generate signed assets for uploading dev builds