espressif/Sign Windows, macOS files and JARs
Sign Windows files (.exe, .dll, .cat, .sys, .msi, .ps1, .jar) using Azure Key Vault and Jsign; on macOS runners can also sign and notarize .app, .pkg, .dmg.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to file or directory containing files to sign | yes | — |
| digest-algorithm | Digest algorithm to use (SHA-256, SHA-384, SHA-512) | no | SHA-256 |
| azure-client-id | Azure Service Principal Client ID (omit for macOS-only signing) | no | "" |
| azure-client-secret | Azure Service Principal Client Secret | no | "" |
| azure-tenant-id | Azure Tenant ID | no | "" |
| azure-keyvault-uri | Azure Key Vault URI | no | "" |
| azure-keyvault-cert-name | Certificate name in Key Vault | no | "" |
| azure-keyvault-certchain | Certificate chain (.p7b) content for JAR signing | no | "" |
| jsign-version | Jsign version to use | no | 7.4 |
| macos-signing-identity | macOS code signing identity (e.g. "Developer ID Application Name (TEAM_ID)"). | no | "" |
| macos-certificate | Base64-encoded .p12 certificate for macOS code signing. | no | "" |
| macos-certificate-pwd | Password for the macOS .p12 certificate. | no | "" |
| macos-entitlements | Path to entitlements file for codesign (optional, e.g. app.entitlements). | no | "" |
| notarization-username | Apple ID for notarization. | no | "" |
| notarization-password | App-specific password for notarization. | no | "" |
| notarization-team-id | Apple Team ID for notarization. | no | "" |
Outputs
no outputs