ci(release): run verify-signatures in the release environment #100

2026-10-10T21:32:34Z

KofTwentyTwo commented

2026-10-10 21:32:34 +00:00

(Migrated from github.com)

The job checks the publisher against TRUSTED_SIGNING_SUBJECT, a
elease-environment variable, but did not run in that environment and so read an empty value (v1.0.2-beta.3, run 38087007507). Adds nvironment: release. The release itself was fully signed: verified locally with signtool on all 289 executables and libraries across Setup, the portable zip and the CLI zip, 0 failures.

Closes #99 (part of #62).

Tested: actionlint clean.

🤖 Generated with Claude Code

The job checks the publisher against TRUSTED_SIGNING_SUBJECT, a elease-environment variable, but did not run in that environment and so read an empty value (v1.0.2-beta.3, run 38087007507). Adds nvironment: release. The release itself was fully signed: verified locally with signtool on all 289 executables and libraries across Setup, the portable zip and the CLI zip, 0 failures. Closes #99 (part of #62). Tested: actionlint clean. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/gclo#100