electron_sign_exe.js

const { execSync } = require("child_process");

module.exports = async function (configuration) {
  if (!configuration.path.includes(configuration.name + " Setup")) {
    return;
  }

  const filePath = configuration.path;
  const directoryId = process.env.WINDOWS_DIRECTORY_ID;
  const clientId = process.env.WINDOWS_CLIENT_ID;
  const clientSecret = process.env.WINDOWS_CLIENT_SECRET;

  try {
    execSync(
      `AzureSignTool.exe sign -du "https://bmm.bcc.media" -kvu "https://bccm-code-sign2.vault.azure.net" -kvt ${directoryId} -kvi ${clientId} -kvs ${clientSecret} -kvc "HSM-CS" -tr "http://timestamp.digicert.com" -v "${filePath}"`,
      { stdio: "inherit" },
    );
    console.log(`Successfully signed ${filePath}`);
  } catch (error) {
    console.error(`Failed to sign ${filePath}`);
    throw error;
  }
};