diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml index 47d1584..574725f 100644 --- a/.github/workflows/template.yml +++ b/.github/workflows/template.yml @@ -110,5 +110,12 @@ jobs: # openssl pkcs12 -in cert.p12 -nodes -legacy -passin pass:"${{ secrets.nugetCertificatePassword }}" | openssl x509 -noout -subject -legacy || echo "Certificate validation failed" # - name: Sign package # run: dotnet nuget sign unsigned/*.nupkg --certificate-path cert.p12 --certificate-password ${{ secrets.nugetCertificatePassword }} --timestamper http://timestamp.digicert.com --output signed - - name: Push package - run: dotnet nuget push signed/${{needs.build.outputs.nupkgFilename}} --api-key ${{ secrets.nugetApiKey }} --source https://api.nuget.org/v3/index.json + - name: Signing using Nuget + run: | + dir d: + dir d:\a + copy D:\a\github-action-electron\github-action-electron\UNSIGNED.nupkg D:\a\github-action-electron\github-action-electron\dist\UNSIGNED.nupkg + nuget sign "d:/a/unsigned/*.nupkg" -Timestamper http://timestamp.digicert.com -outputdirectory "D:\a\signed" -CertificateFingerprint ${{ secrets.SM_CODE_SIGNING_CERT_SHA1_HASH }} -HashAlgorithm SHA256 -Verbosity detailed -Overwrite + nuget verify -All "D:\a\github-action-electron\github-action-electron\dist\Signed\*" + # - name: Push package + # run: dotnet nuget push signed/${{needs.build.outputs.nupkgFilename}} --api-key ${{ secrets.nugetApiKey }} --source https://api.nuget.org/v3/index.json