Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: Sign Windows binary on master only #2342

Merged
merged 1 commit into from
Sep 10, 2024

Conversation

taratatach
Copy link
Member

@taratatach taratatach commented Sep 9, 2024

Since we switched to using DigiCert's cloud HSM for code signing
certificate storage (the other option being using a hardware token),
we have been limited to 1000 code signatures per year.

We could increase the number of allowed signatures at a cost.

We choose to stop signing binaries generated by Pull Requests as
they're not published.

Please make sure the following boxes are checked:

  • PR is not too big
  • it improves UX & DX in some way
  • it includes unit tests matching the implementation changes
  • it includes scenarios matching a new behaviour or has been manually tested
  • it includes relevant documentation

@taratatach taratatach self-assigned this Sep 9, 2024
@taratatach taratatach force-pushed the ci/sign-windows-binary-only-on-master branch 2 times, most recently from ee99765 to 725b84a Compare September 9, 2024 14:45
@taratatach taratatach changed the title WIP: ci: Sign Windows binary on master only ci: Sign Windows binary on master only Sep 9, 2024
@taratatach taratatach requested a review from nono September 9, 2024 14:46
@taratatach taratatach marked this pull request as ready for review September 9, 2024 14:46
@taratatach taratatach force-pushed the ci/sign-windows-binary-only-on-master branch 7 times, most recently from a921720 to 843baee Compare September 10, 2024 15:38
  Since we switched to using DigiCert's cloud HSM for code signing
  certificate storage (the other option being using a hardware token),
  we have been limited to 1000 code signatures per year.

  We could increase the number of allowed signatures at a cost.

  We choose to stop signing binaries generated by Pull Requests as
  they're not published.
@taratatach taratatach force-pushed the ci/sign-windows-binary-only-on-master branch from 843baee to 22af359 Compare September 10, 2024 15:45
@taratatach taratatach merged commit ad42a8e into master Sep 10, 2024
12 of 16 checks passed
@taratatach taratatach deleted the ci/sign-windows-binary-only-on-master branch September 10, 2024 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants