nextgens/Authenticode cloud signer
Code-sign files using a key hosted on google KMS.
View on GitHubTrust Signals
- Scorecard Score
- Scorecard 0–2scored Jul 6, 2026
- Maintenance Recency
- Activelast commit May 11, 2026
- License
- None
Pinned Snippet
uses: nextgens/authenticode-sign-action@90220a4c61156c8d9ce3d6ebb0fe790f7c01b3a7 # v1.0.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| key-uri | The google KMS resource ID to use. | yes | — |
| certificate | The base64 encoded certificate chain to use (PEM). | yes | — |
| credentials | The base64 encoded JSON credentials to use. | yes | — |
| timestamp-url | The RFC3161 timestamping server URL to use | no | http://timestamp.digicert.com |
| description | The /d parameter of signtool.exe | no | — |
| description-url | The /du parameter of signtool.exe | no | — |
| page-hash | The /ph and /nph parameter of signtool.exe | no | true |
| folder | The folder that contains the files to sign. | yes | — |
| recursive | Recursively search for supported files. | no | — |
Outputs
no outputs