Skip to content

feat: User azure for artifact signatures#528

Merged
dz0ny merged 1 commit intomainfrom
feat/switch-to-azure-cli-signing
Apr 9, 2026
Merged

feat: User azure for artifact signatures#528
dz0ny merged 1 commit intomainfrom
feat/switch-to-azure-cli-signing

Conversation

@dz0ny
Copy link
Copy Markdown
Member

@dz0ny dz0ny commented Apr 8, 2026

Copilot AI review requested due to automatic review settings April 8, 2026 13:10
@dz0ny dz0ny force-pushed the feat/switch-to-azure-cli-signing branch from 7c6bbbd to 8feb869 Compare April 8, 2026 13:10
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 8, 2026

🚀 Dev Builds Available

Development builds for this PR are available in the workflow artifacts.

Available builds:

  • Windows (agent, installer, tray)
  • Linux (agent)
  • macOS (agent)

Download the build artifact to test the latest changes.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the release pipeline to sign Windows artifacts via Azure Code Signing (instead of the previous custom VM-based approach), and refreshes the Nix devenv lock inputs.

Changes:

  • Switch Windows release signing to azure/artifact-signing-action@v1 and validate signatures via Get-AuthenticodeSignature.
  • Remove the manual Azure Win11 VM workflow previously used for temporary signing infrastructure.
  • Update devenv.lock inputs (including narHash entries and nixpkgs source wiring).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 3 comments.

File Description
devenv.lock Updates pinned devenv/nixpkgs-related inputs and adds narHash entries.
.github/workflows/win-vm.yml Removes the manual workflow for starting/reimaging a Windows VM in Azure.
.github/workflows/release.yml Migrates Windows signing to Azure artifact signing and adds signature verification.

@dz0ny dz0ny merged commit 7d80f57 into main Apr 9, 2026
37 of 38 checks passed
@dz0ny dz0ny deleted the feat/switch-to-azure-cli-signing branch April 9, 2026 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants