From 41ce2df00c09cbb185ea6290e3db9be35216ec67 Mon Sep 17 00:00:00 2001
From: Gregory Schier <gschier1990@gmail.com>
Date: Fri, 22 Nov 2024 05:49:24 -0800
Subject: [PATCH] Move signing into Tauri

---
 .github/workflows/release.yml | 11 ++---------
 src-tauri/tauri.conf.json     |  3 ++-
 2 files changed, 4 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 26fd04e9..f78fb13d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -52,7 +52,7 @@ jobs:
             ~/.cargo/registry/index/
             ~/.cargo/registry/cache/
             ~/.cargo/git/db/
-            target/
+            src-tauri/target/
           key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
           restore-keys: ${{ runner.os }}-cargo-
 
@@ -64,14 +64,7 @@ jobs:
 
       - name: install dependencies (windows only)
         if: matrix.platform == 'windows-latest'
-        shell: bash
-        env:
-          # replace Azure credentials before running
-          WINDOWS_SIGN_COMMAND: trusted-signing-cli -e "${{ secrets.AZURE_ENDPOINT }}" -a "${{ secrets.AZURE_CODE_SIGNING_NAME }}" -c "${{ secrets.AZURE_CERT_PROFILE_NAME }}" %1
-        run: |
-          cd "$GITHUB_WORKSPACE"
-          cat './src-tauri/tauri.conf.json' | jq '.bundle .windows += {"signCommand": env.WINDOWS_SIGN_COMMAND}' > './src-tauri/temp.json' && mv './src-tauri/temp.json' './src-tauri/tauri.conf.json'
-          cargo install trusted-signing-cli
+        run: cargo install trusted-signing-cli
 
       - name: Install NPM Dependencies
         run: |
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index b3271070..ccbae9ba 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -80,7 +80,8 @@
     },
     "windows": {
       "digestAlgorithm": "sha256",
-      "timestampUrl": ""
+      "timestampUrl": "",
+      "signCommand": "trusted-signing-cli -e https://eus.codesigning.azure.net/ -a YaakApp -c yaakapp %1"
     }
   }
 }