search

iterative / dvc-exe

Private repository for building and signing dvc for windows
2 stars 1 forks source link

Use Microsoft Azure Trusted Signing #175

Open 0x2b3bfa0 opened 7 months ago

0x2b3bfa0 commented 7 months ago

With https://github.com/iterative/dvc-exe/pull/174 we've been able to renew the DigiCert certificate until 2025, paying an arm and a leg for it, as usual.

We should migrate Microsoft Azure Trusted Signing as soon as it becomes generally available; it'll be much better.

https://melatonin.dev/blog/how-to-code-sign-windows-installers-with-an-ev-cert-on-github-actions

### Workaround
- [ ] https://github.com/iterative/dvc-exe/pull/174
- [ ] https://github.com/iterative/itops/pull/3920
skshetry commented 7 months ago

Should we try emailing them?

0x2b3bfa0 commented 7 months ago

Maybe we can email them, but it looks like "they have stopped taking additional people into the preview"

2024 Update: Azure is working on a Code Signing product and it’s now in Private Preview, along with a companion GitHub Action. They have stopped taking additional people into the preview, citing an imminent public launch (likely with the next big Windows announcements).