Skip to content

Use Certum SimplySign for Windows release signing#150

Merged
enaboapps merged 1 commit into
mainfrom
feat/certum-signing-149
Jun 18, 2026
Merged

Use Certum SimplySign for Windows release signing#150
enaboapps merged 1 commit into
mainfrom
feat/certum-signing-149

Conversation

@enaboapps

Copy link
Copy Markdown
Contributor

Closes #149

Summary

  • Add SWITCHIFY_SIGNING_MODE=certum-simplysign to the Windows signing hooks.
  • Sign with SWITCHIFY_CERTUM_CERT_THUMBPRINT and Certum timestamping by default.
  • Update release workflow to run on the self-hosted signing runner and fail early if the Certum SimplySign certificate is unavailable.
  • Add unit coverage for Certum signing args.

Validation

  • npm test
  • npm run typecheck
  • npm run build
  • npm run package:win with Certum signing mode
  • npm run package:win:verify-uiaccess
  • signtool verify /pa /v dist\Switchify-PC-Setup-0.1.0-x64.exe
  • signtool verify /pa /v "dist\win-unpacked\Switchify PC.exe"

@enaboapps enaboapps merged commit 7b4e597 into main Jun 18, 2026
1 check passed
@enaboapps enaboapps deleted the feat/certum-signing-149 branch June 18, 2026 13:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Use Certum SimplySign for Windows release signing

2 participants