Mailspring/app/build
Ben Gotow 38672d50cf
Migrate Windows code signing to Azure Trusted Signing (#2552)
Replace traditional P12 certificate-based signing with Azure Trusted Signing
for Windows builds. This provides better security and simplifies certificate
management by using Azure's cloud-based signing service.

Changes:
- Remove P12 certificate setup step from workflow
- Add Azure Trusted Signing action to sign application files (exe, dll)
- Add Azure Trusted Signing action to sign the installer after creation
- Update create-signed-windows-installer.js to remove certificate options

Required secrets:
- AZURE_TENANT_ID
- AZURE_CLIENT_ID
- AZURE_CLIENT_SECRET
- AZURE_TRUSTED_SIGNING_ENDPOINT
- AZURE_TRUSTED_SIGNING_ACCOUNT_NAME
- AZURE_TRUSTED_SIGNING_CERT_PROFILE_NAME

Co-authored-by: Claude <noreply@anthropic.com>
2026-01-07 17:21:46 -06:00
..
docs_src
docs_templates
resources Upgrade Windows installer spinner to high-resolution (800x800) (#2551) 2026-01-07 12:27:38 -06:00
tasks Add an env var for running Intel builds on MacOS Silicon 2025-09-14 22:09:13 -05:00
create-signed-windows-installer.js Migrate Windows code signing to Azure Trusted Signing (#2552) 2026-01-07 17:21:46 -06:00
Gruntfile.js Update electron-packager, remove .dmg mac build - it’s unused 2024-06-02 09:29:16 -05:00