KofTwentyTwo/standards
2
0 Fork 0
Code Issues 3 Pull Requests 3 Actions Packages Projects Releases 6 Wiki Activity

fix(signing): pin reviewed helpers reachable from main #39

Merged
KofTwentyTwo merged 1 commits from fix/signing-helper-main-pin into main 2026-10-12 15:26:19 +00:00
Conversation 0 Commits 1 Files Changed 2
+6 -6
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/workflows/release-nuget.yml
+3 -3
View File
@@ -199,7 +199,7 @@ jobs:
- name: Prepare owned binary signing catalog
if: inputs.sign
id: signing
uses: KofTwentyTwo/standards/.github/actions/windows-signing@3334d02b907d44f4dca1b32553ad2bd6203c7b7f # unreleased signing helpers
uses: KofTwentyTwo/standards/.github/actions/windows-signing@f896215ec96854b18883191759259fd9866ee9be # reviewed signing helpers on main
with:
operation: prepare
signing-files: ${{ inputs.signing-files }}
@@ -255,7 +255,7 @@ jobs:
- name: Verify signed binaries
if: inputs.sign
uses: KofTwentyTwo/standards/.github/actions/windows-signing@3334d02b907d44f4dca1b32553ad2bd6203c7b7f # unreleased signing helpers
uses: KofTwentyTwo/standards/.github/actions/windows-signing@f896215ec96854b18883191759259fd9866ee9be # reviewed signing helpers on main
with:
operation: verify
manifest: ${{ steps.signing.outputs.manifest }}
@@ -269,7 +269,7 @@ jobs:
- name: Verify the exact binaries shipped in NuGet packages
if: inputs.sign
uses: KofTwentyTwo/standards/.github/actions/windows-signing@3334d02b907d44f4dca1b32553ad2bd6203c7b7f # unreleased signing helpers
uses: KofTwentyTwo/standards/.github/actions/windows-signing@f896215ec96854b18883191759259fd9866ee9be # reviewed signing helpers on main
with:
operation: verify-distribution
directory: artifacts/nuget
.github/workflows/release-velopack.yml
+3 -3
View File
@@ -333,7 +333,7 @@ jobs:
- name: Prepare owned binary signing catalog
if: inputs.sign
id: signing
uses: KofTwentyTwo/standards/.github/actions/windows-signing@3334d02b907d44f4dca1b32553ad2bd6203c7b7f # unreleased signing helpers
uses: KofTwentyTwo/standards/.github/actions/windows-signing@f896215ec96854b18883191759259fd9866ee9be # reviewed signing helpers on main
with:
operation: prepare
root: publish
@@ -395,7 +395,7 @@ jobs:
- name: Verify signed binaries and preserved dependencies
if: inputs.sign
uses: KofTwentyTwo/standards/.github/actions/windows-signing@3334d02b907d44f4dca1b32553ad2bd6203c7b7f # unreleased signing helpers
uses: KofTwentyTwo/standards/.github/actions/windows-signing@f896215ec96854b18883191759259fd9866ee9be # reviewed signing helpers on main
with:
operation: verify
manifest: ${{ steps.signing.outputs.manifest }}
@@ -510,7 +510,7 @@ jobs:
- name: Verify final installer, portable, full update and CLI assets
if: inputs.sign
uses: KofTwentyTwo/standards/.github/actions/windows-signing@3334d02b907d44f4dca1b32553ad2bd6203c7b7f # unreleased signing helpers
uses: KofTwentyTwo/standards/.github/actions/windows-signing@f896215ec96854b18883191759259fd9866ee9be # reviewed signing helpers on main
with:
operation: verify-distribution
directory: release